CVE-2026-57810

creationtimestamp| type| source ---|---|--- 2026-07-13 11:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkqku2ti25 2026-07-13 17:09:57+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqk6ohkb7p2q 2026-07-13 17:10:18+00:00| seen|...

CVE-2026-22095

creationtimestamp| type| source ---|---|--- 2026-07-13 11:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkkxda4q2v 2026-07-13 17:50:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkawmzfkt2e 2026-07-14 03:06:01+00:00| seen|...

CVE-2026-57372

creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjki53kpu2c 2026-07-13 18:59:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkersqb2a2w...

CVE-2026-22093

creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkhgrukm2t 2026-07-13 17:49:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkavfwvjs2y 2026-07-14 03:05:48+00:00| seen|...

CVE-2026-57388

creationtimestamp| type| source ---|---|--- 2026-07-13 11:05:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjkcfpmde2e 2026-07-16 07:56:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr5dxfdi2y...

CVE-2026-57376

creationtimestamp| type| source ---|---|--- 2026-07-13 11:03:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjk7x7nku2f 2026-07-16 07:56:09+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr4xobay2y...

CVE-2026-57369

creationtimestamp| type| source ---|---|--- 2026-07-13 11:03:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjk6m4vk222 2026-07-13 18:55:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkelkgb7c27 2026-07-14 01:21:35+00:00| seen|...

CVE-2026-57387

creationtimestamp| type| source ---|---|--- 2026-07-13 11:01:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjk2zcjob2w...

CVE-2026-57381

creationtimestamp| type| source ---|---|--- 2026-07-13 10:59:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjxs6j7527 2026-07-13 18:57:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkenyr3e52f 2026-07-16 07:55:52+00:00| seen|...

CVE-2026-57390

creationtimestamp| type| source ---|---|--- 2026-07-13 10:56:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjswzowh2e...

CVE-2026-57378

creationtimestamp| type| source ---|---|--- 2026-07-13 10:50:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjhx2lvr22 2026-07-13 18:56:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkemzm2be22 2026-07-16 07:55:34+00:00| seen|...

Authentication Bypass by Primary Weakness

Overview github.com/mattermost/mattermost/server/v8/channels/api4 is a platform for secure collaboration across the entire software development lifecycle Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the magic-link token authentication process. A...

Authentication Bypass by Primary Weakness

Overview Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the magic-link token authentication process. An attacker can gain unauthorized access to a deactivated guest account by using a previously issued magic-link token. Remediation Upgrade...

EUVD-2026-43315

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional session via a magic-link token issued prior to deactivation...

CERTFR-2026-CTI-004

creationtimestamp| type| source ---|---|--- 2026-07-13 09:25:58+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116911948082559856...

CVE-2026-9597

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional session via a magic-link token issued prior to deactivation...

EUVD-2026-43330

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

CVE-2026-15542

creationtimestamp| type| source ---|---|--- 2026-07-13 08:36:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbyagvs42f 2026-07-13 10:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjhw3d2bu2l...

CVE-2026-15540

creationtimestamp| type| source ---|---|--- 2026-07-13 08:33:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbt62nwu27 2026-07-13 10:08:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjh4ix3v227...

CVE-2026-9597 Deactivated guest accounts can authenticate via magic-link token in Mattermost REST API login endpoint

Mattermost versions 11.7.x = 11.7.2, 11.6.x = 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional session via a magic-link token issued prior to deactivation...