CWE-1426

2 CVEs classified under CWE-1426. Browse by severity and year.

Top CVEs for CWE-1426
CVESeverityScorePublishedSummary
CVE-2025-55074Low3.02025-11-18Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when us…
CVE-2025-31363Low3.02025-04-16Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authe…
All CVEs classified under CWE-1426 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2025-55074Low3.02025-11-18Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when us…
CVE-2025-31363Low3.02025-04-16Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authe…