CVE-2026-16048

Mattermost versions 11.8.x through 11.8.2, 11.7.x through 11.7.6, and 10.11.x through 10.11.21 fail to restrict the channel member roles API to channel-scoped roles, allowing a channel administrator to assign out-of-scope roles and gain additional permissions. Advisory MMSA-2026-00697 tracks the ...

OpenClaw Authentication Bypass Vulnerability

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw there is an authentication bypass vulnerability , the vulnerability stems from the gateway authentication there is a path normalization mismatch problem , an attacker can use the vulnerability to bypass...

EUVD-2025-24174

Malicious code in bioql PyPI...

CVE-2018-21255

An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to modify that channel...