CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

17 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-2462	6.6	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on	173d ago
CVE-2026-2454	5.8	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported arr	173d ago
CVE-2026-2456	5.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of r	173d ago
CVE-2026-1629	4.3	medium	mattermost / mattermost server	Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel	173d ago
CVE-2026-26304	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId,	173d ago
CVE-2026-2455	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 a	173d ago
CVE-2026-24692	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissi	173d ago
CVE-2026-21386	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses	173d ago
CVE-2026-4265	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_f	173d ago
CVE-2026-2578	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion whic	173d ago
CVE-2026-2463	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user	173d ago
CVE-2026-2461	4.3	medium	mattermost / mattermost server	Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block	173d ago
CVE-2026-2458	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membersh	173d ago
CVE-2026-2457	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post m	173d ago
CVE-2026-26246	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when p	173d ago
CVE-2026-25783	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent h	173d ago
CVE-2026-25780	4.3	medium	mattermost / mattermost server	Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when p	173d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker