Mattermost Server 11.7.x < 11.7.7 / 11.8.x < 11.8.4 Incorrect Authorization (MMSA-2026-00718)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2026-00718 advisory. - Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belong...

CVE-2026-15754

Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC attribute-based access control policy...

CVE-2026-15754 Missing per-channel team-scope check in ABAC access control policy unassign allows cross-team policy removal

Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC attribute-based access control policy...

CVE-2026-15754

Mattermost 11.7.x (≤11.7.6) and 11.8.x (≤11.8.3) have a missing per-channel team-scope check in the ABAC policy unassign endpoint, allowing an authenticated team administrator to remove ABAC policy assignments from channels that have been moved to another team. Impact is integrity-focused (CVSS 4...

CVE-2026-15754 Missing per-channel team-scope check in ABAC access control policy unassign allows cross-team policy removal

Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC attribute-based access control policy...

EUVD-2026-60212

Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC attribute-based access control policy...

CVE-2026-15754

Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC attribute-based access control policy...

PT-2026-76668

Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC attribute-based access control policy...

HChain 4.0: a Secure and Scalable Permissioned Blockchain for EHR Management in Smart Healthcare

The growing utilization of Internet of Medical Things IoMT devices, including smartwatches and wearable medical devices, has facilitated real-time health monitoring and data analysis to enhance healthcare outcomes. These gadgets necessitate improved security measures to safeguard sensitive health...

CVE-2021-32835

CVE-2021-32835 affects Eclipse Keti, a service that enforces ABAC for REST APIs. The connected records identify a Groovy Sandbox escape vulnerability in Keti, which could allow post-authentication Remote Code Execution (RCE). The issue is linked to a commit (a1c8dbe) and is discussed in GHSL-2021...

CVE-2021-32834 Arbitrary Groovy script evaluation in Eclipse Keti

Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control ABAC. In Keti a user able to create Policy Sets can run arbitrary code by sending malicious Groovy scripts which will escape the configured Groovy sandbox. This vulnerability is known to exist...

CVE-2021-32834

CVE-2021-32834 affects Eclipse Keti, a REST API protection service using ABAC. The vulnerability arises when a user who can create Policy Sets can submit malicious Groovy scripts that escape the Groovy sandbox, enabling arbitrary code execution. Reported CVSS details exist across sources (e.g., N...

Abac Karaoke 2.15 Denial of Service Vulnerability

No description provided by source. Exploit Title: Abac Karaoke 2.15 .mp3 , .wma DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/abac-karaoke-build2218982.html?hl=&ia=0 Version: v2.15 Tested on: Windows XP SP 2 CVE : N / A Description : This is the...

Abac Karaoke 2.15 Denial Of Service

Exploit Title: Abac Karaoke 2.15 .mp3 , .wma DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/abac-karaoke-build2218982.html?hl=&ia=0 Version: v2.15 Tested on: Windows XP SP 2 CVE : N / A Description : This is the latest version from the official...

Abac Karaoke 2.15 - Denial of Service

Abac Karaoke 2.15 - Denial of Service Exploit Title: Abac Karaoke 2.15 .mp3 , .wma DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/abac-karaoke-build2218982.html?hl=&ia=0 Version: v2.15 Tested on: Windows XP SP 2 CVE : N / A Description : This is t...

Abac Karaoke 2.15 - Denial of Service

Exploit Title: Abac Karaoke 2.15 .mp3 , .wma DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/abac-karaoke-build2218982.html?hl=&ia=0 Version: v2.15 Tested on: Windows XP SP 2 CVE : N / A Description : This is the latest version from the official...

Abac Karaoke 2.15 Denial of Service

Exploit for windows platform in category dos / poc =================================== Abac Karaoke 2.15 Denial of Service =================================== Exploit Title: Abac Karaoke 2.15 .mp3 , .wma DoS Author: Oh Yaw Theng Software Link:...