CVE-2026-2462
published 2026-03-16CVE-2026-2462: Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin…
PriorityP341medium6.6CVSS 3.1
AVNACLPRHUINSCCLILAL
EPSS
0.34%
27.3th percentile
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an unauthenticated attacker to achieve remote code execution and exfiltrate sensitive configuration data including AWS and SMTP credentials via uploading a malicious plugin after changing the import directory. Mattermost Advisory ID: MMSA-2025-00528
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mattermost | mattermost | 10.11.0 – 10.11.10 | — |
| mattermost | mattermost | 11.2.0 – 11.2.2 | — |
| mattermost | mattermost | 11.3.0 – 11.3.0 | — |
| mattermost | mattermost_server | >= 10.11.0 < 10.11.11 | 10.11.11 |
| mattermost | mattermost_server | >= 11.2.0 < 11.2.3 | 11.2.3 |
| mattermost | mattermost_server | >= 11.3.0 < 11.3.1 | 11.3.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-88829 busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxy [fedora-all]
bugzilla·2026-10-14·CVSS 7.2
CVE-2026-88829 [HIGH] CVE-2026-88829 busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxy [fedora-all]
CVE-2026-88829 busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxy [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
BusyBox httpd reverse proxy (CONFIG_FEATURE_HTTPD_PROXY, default enabled). When a P: rule matches, handle_incoming_and_exit() in networking/httpd.c rewrites only the first request line to the backend path (lines 2458-2462), sets G.POST_len = INT_MAX (line 2467), and enters cgi_io_loop_and_exit() (line 2468), which relays further client bytes to the backend without HTTP parsing. A pipelined second request on the same TCP connection therefore reaches the ba
Bugzilla
CVE-2026-72152 kernel: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
bugzilla·2026-08-15
CVE-2026-72152 [LOW] CVE-2026-72152 kernel: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
CVE-2026-72152 kernel: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
In the Linux kernel, the following vulnerability has been resolved:
tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
wait_event_interruptible_timeout() evaluates its condition after setting
the current task state to TASK_INTERRUPTIBLE.
With CONFIG_DEBUG_ATOMIC_SLEEP this triggers a warning when the IRQ wait
path is used:
tpm_tis_status()
tpm_tis_spi_read_bytes()
tpm_tis_spi_transfer_full()
spi_bus_lock()
mutex_lock()
Address this with the following measures:
1. Call wait_tpm_stat_cond() only while tasking is running.
2. Use wait_woken() to wait for changes.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026081534-CVE-2026-72152-2462@gregkh/T
2026-03-16
Published