CVE-2026-16049

The Mattermost GitLab plugin (versions ≤11.8, 10.20.11, 11.5.7.0) fails to verify channel permissions for caller-supplied post_id and does not validate the web_url parameter against the configured GitLab instance. Through the createIssue and attachCommentToIssue API endpoints, an authenticated at...

MINI-52HJ-CG45-C6JC

Bulletin has no description...

MINI-C45G-85M9-PPF2

Bulletin has no description...

MINI-G2HX-M8H9-4MHG

Bulletin has no description...

MINI-2QM5-MR7Q-CX93

Bulletin has no description...

MINI-WJPP-7XX9-JCF8

Bulletin has no description...

MINI-6PMG-4HJJ-G8P9

Bulletin has no description...

MINI-R774-2VP3-2FR6

Bulletin has no description...

MINI-MR4R-99X6-3V6Q

Bulletin has no description...

MINI-3WRF-M9G9-2JJ9

Bulletin has no description...

MINI-7JJR-WJWR-342G

Bulletin has no description...

MINI-639Q-JHV7-5F27

Bulletin has no description...

MINI-2W33-VF56-4G7P

Bulletin has no description...

MINI-R867-M5QX-RM97

Bulletin has no description...

CVE-2026-72323

creationtimestamp| type| source ---|---|--- 2026-08-17 11:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbkv7q3et2u...

MINI-X54F-2VH3-477C

Bulletin has no description...

MINI-JP6V-M4FP-H644

Bulletin has no description...

MINI-RJ4Q-CXFF-JH33

Bulletin has no description...

MINI-XVQ6-9GWW-9Q44

Bulletin has no description...

MINI-XVVV-G4QC-V63X

Bulletin has no description...