https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:32:25.205832+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-28741 CVE-2026-28741 — CSRF Protection Bypass Allows Updating a User's Authentication Method 2026-09-29T03:32:25.221811+00:00

Affected: Mattermost

Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail to validate CSRF tokens on an authentication endpoint which allows an attacker to update a user's authentication method via a CSRF attack by tricking a user into visiting a malicious page. Mattermost Advisory ID: MMSA-2026-00625