CVE-2026-2299 Improper Access Control in Mattermost Google Drive Plugin File Creation Endpoint

The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Google Drive files to unauthorized private channels and disclose private channel membership...

CVE-2026-2299

CVE-2026-2299 affects the Mattermost Google Drive plugin prior to version 1.1.0. The file creation endpoint does not validate channel membership, allowing authenticated users with a connected Google account to share Google Drive files into unauthorized private channels and disclose private channe...

CVE-2026-56767

Maxun before version 0.0.42 is affected by a cross-tenant insecure direct object reference in storage and webhook API handlers. Authenticated users can bypass ownership checks to read other users’ robots and OAuth tokens, including plaintext Google and Airtable tokens, and can modify, delete, or ...

AI and Liability

Earlier this month, a German court ruled that Google is liable for its AI search summaries. Rejecting defenses like "users can check for themselves," and that they generally know "that information generated with AI should not be blindly trusted," the court held that the AI's summaries are...

CVE-2026-13038

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:18+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 07:09:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116809488538860724 2026-06-25 09:45:07+00:00| seen|...

CVE-2026-13037

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c...

CVE-2026-13035

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:11+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 08:04:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116809705187882392 2026-06-25 12:00:13+00:00| seen|...

CVE-2026-13034

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:23+00:00| seen|...

CVE-2026-13033

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-06-30 22:37:06+00:00| seen|...

CVE-2026-13032

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:04+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-06-26 18:37:07+00:00| seen|...

CVE-2026-13031

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-06-30 22:07:07+00:00| seen|...

CVE-2026-13030

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:59+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c...

CVE-2026-13029

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:56+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:15+00:00| seen|...

CVE-2026-13028

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:54+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-06-27 06:07:06+00:00| seen|...

CVE-2026-13027

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:51+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 00:37:07+00:00| seen|...

CVE-2026-13026

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:49+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 00:07:07+00:00| seen|...

CVE-2026-13025

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:08+00:00| seen|...

CVE-2026-13024

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:44+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:06+00:00| seen|...

CVE-2026-13023

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:04+00:00| seen|...

CVE-2026-13022

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:01+00:00| seen|...