CVE-2026-6689

Mattermost vulnerable versions: 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x

CVE-2026-6689 *Missing* {{invite_user}} *permission check on team creation allows unprivileged users to set open-invite and allowed-domains team settings*

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation the check was only applied on update/patch, which allows an authenticated user holding...

EUVD-2026-36501

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation the check was only applied on update/patch, which allows an authenticated user holding...

CVE-2026-47195

creationtimestamp| type| source ---|---|--- 2026-06-12 13:52:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3v5xts342j...

CVE-2026-48485

creationtimestamp| type| source ---|---|--- 2026-06-12 13:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3um2z5le2f...

CVE-2026-41708

creationtimestamp| type| source ---|---|--- 2026-06-12 12:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3rytodm42d 2026-06-15 20:13:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe3ve7spj2y...

CVE-2026-49347 Quest Bot: Ticket creation has no per-user open-ticket limit or cooldown

Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates a new database ticket and Discord channel for every completed ticket modal submission, without checking whether the...

CVE-2026-49347 Quest Bot: Ticket creation has no per-user open-ticket limit or cooldown

Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates a new database ticket and Discord channel for every completed ticket modal submission, without checking whether the...

CVE-2026-49347 Quest Bot: Ticket creation has no per-user open-ticket limit or cooldown

Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates a new database ticket and Discord channel for every completed ticket modal submission, without checking whether the...

CVE-2026-11847

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create directories in unintended system paths...

CVE-2026-11847

The CVE-2026-11847 entry concerns the iVEC-IEI Virtualization Edge Computer from IEI Integration Corp. Affected component is the system’s path traversal vulnerability that allows authenticated remote attackers to create directories in unintended system paths. Documented impact indicates unauthori...

EUVD-2026-36407

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create directories in unintended system paths...

CVE-2026-11847 Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Deletion

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create directories in unintended system paths...

Exploit for CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 -...

CVE-2026-12059

creationtimestamp| type| source ---|---|--- 2026-06-12 07:46:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3araifho2j 2026-06-12 08:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3bju2pkl2i 2026-06-12 09:15:01+00:00| seen|...

CVE-2026-48613

creationtimestamp| type| source ---|---|--- 2026-06-12 07:36:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3a7dmx5p2r...

CVE-2026-9269

creationtimestamp| type| source ---|---|--- 2026-06-12 07:27:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo37opnhz42b...

CVE-2026-9266

creationtimestamp| type| source ---|---|--- 2026-06-12 07:09:11+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-594 2026-06-12 13:00:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3sb5ojvv2o 2026-06-12 13:47:00+00:00| seen|...

CVE-2026-44892

creationtimestamp| type| source ---|---|--- 2026-06-12 06:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo32tbuo3h2n 2026-06-12 07:41:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3aic2bcn23...

CVE-2026-47365

creationtimestamp| type| source ---|---|--- 2026-06-12 05:12:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2y54jypy25 2026-06-12 07:19:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo37a36mva2v 2026-06-12 08:01:49+00:00| seen|...