Total
398554 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-56872 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||
| CVE-2026-56871 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||
| CVE-2026-56870 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||
| CVE-2026-56869 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||
| CVE-2026-56868 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||
| CVE-2026-56867 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||
| CVE-2025-25256 | 1 Fortinet | 1 Fortisiem | 2026-08-18 | N/A | 9.8 CRITICAL |
| An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0 through 7.0.3, FortiSIEM 6.7.0 through 6.7.9, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions, FortiSIEM 6.3 all versions, FortiSIEM 6.2 all versions, FortiSIEM 6.1 all versions, FortiSIEM 5.4 all versions, FortiSIEM 5.3 all versions, FortiSIEM 5.2 all versions, FortiSIEM 5.1 all versions, FortiSIEM 5.0 all versions, FortiSIEM 4.10 all versions, FortiSIEM 4.9 all versions, FortiSIEM 4.7 all versions allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests. | |||||
| CVE-2026-16048 | 1 Mattermost | 1 Mattermost Server | 2026-08-18 | N/A | 6.3 MEDIUM |
| Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict channel member role assignment to channel-scoped roles which allows a channel administrator to gain additional channel permissions via the channel member roles API.. Mattermost Advisory ID: MMSA-2026-00697 | |||||
| CVE-2026-16047 | 1 Mattermost | 1 Mattermost Server | 2026-08-18 | N/A | 4.3 MEDIUM |
| Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate that users have read access to a channel before linking a board to it, which allows an authenticated attacker to discover the membership of private channels on the same team via creating, patching, importing, or bulk-creating boards with an arbitrary channelId. Mattermost Advisory ID: MMSA-2026-00674 | |||||
| CVE-2026-16046 | 1 Mattermost | 1 Mattermost Server | 2026-08-18 | N/A | 4.3 MEDIUM |
| Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to enforce run-state validation on write operations for finished playbook runs which allows a run participant to modify status, checklists, retrospective content, ownership, and participants on completed runs via REST and GraphQL API requests. Mattermost Advisory ID: MMSA-2026-00675 | |||||
| CVE-2026-16045 | 1 Mattermost | 1 Mattermost Server | 2026-08-18 | N/A | 4.3 MEDIUM |
| Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 Mattermost failed to restrict OAuth deauthorization and personal access token management endpoints to direct user sessions, which allowed an OAuth app with a delegated user token to revoke the user's authorizations or tokens for other integrations via account-management endpoints.. Mattermost Advisory ID: MMSA-2026-00704 | |||||
| CVE-2026-16044 | 1 Mattermost | 1 Mattermost Server | 2026-08-18 | N/A | 5.4 MEDIUM |
| Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive import which allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file. Mattermost Advisory ID: MMSA-2026-00672 | |||||
| CVE-2026-15754 | 1 Mattermost | 1 Mattermost Server | 2026-08-18 | N/A | 4.2 MEDIUM |
| Mattermost versions 11.7.x <= 11.7.6, 11.8.x <= 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC (attribute-based access control) policy assignments from channels outside their team via the policy unassign API after a channel has been moved to another team.. Mattermost Advisory ID: MMSA-2026-00718 | |||||
| CVE-2026-10527 | 1 Mattermost | 1 Mattermost Server | 2026-08-18 | N/A | 6.3 MEDIUM |
| Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which allows a user demoted to System Guest to retain Board Admin privileges and perform admin-only operations via the Boards REST API or UI.. Mattermost Advisory ID: MMSA-2026-00691 | |||||
| CVE-2026-73112 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||
| CVE-2026-73111 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||
| CVE-2026-73106 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||
| CVE-2026-73105 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||
| CVE-2026-73104 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||
| CVE-2026-73103 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |||||