Логотип exploitDog
bind:CVE-2026-2458
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-2458

Количество 3

Количество 3

nvd логотип

CVE-2026-2458

17 дней назад

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed team member to enumerate all public channels within a private team via the channel search API endpoint.. Mattermost Advisory ID: MMSA-2025-00568

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2026-2458

17 дней назад

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10. ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-679f-wmrg-qf57

17 дней назад

Mattermost allows a removed team member to enumerate all public channels within a private team

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-2458

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed team member to enumerate all public channels within a private team via the channel search API endpoint.. Mattermost Advisory ID: MMSA-2025-00568

CVSS3: 4.3
0%
Низкий
17 дней назад
debian логотип
CVE-2026-2458

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10. ...

CVSS3: 4.3
0%
Низкий
17 дней назад
github логотип
GHSA-679f-wmrg-qf57

Mattermost allows a removed team member to enumerate all public channels within a private team

CVSS3: 4.3
0%
Низкий
17 дней назад

Уязвимостей на страницу