Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:36:58 +0000 CVE-2026-75587 — Plaintext pre-auth secret exposure via Desktop App diagnostics report https://vulnerability.circl.lu/vuln/cve-2026-75587 <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost Desktop App versions &lt;=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user&#39;s diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716</p> <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost Desktop App versions &lt;=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user&#39;s diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716</p> https://vulnerability.circl.lu/vuln/cve-2026-75587