https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T21:32:35.400963+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-24692 CVE-2026-24692 — Guest users can bypass read permissions via search API 2026-10-06T21:32:35.402490+00:00

Affected: Mattermost

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554