tocsin

CVE-2025-9076

6 advisories.

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-9076: medium 6.5, EPSS 0.26%

Mattermost Missing Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250729073403-517ae758cd02 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250729073403-517ae758cd02

Affected

introducedfixedlast affected
08.0.0-20250729073403-517ae758cd02-

Fixed versions

8.0.0-20250729073403-517ae758cd02

Sources

CVE-2025-9076 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2025-9076: medium 6.5, EPSS 0.26%

Mattermost Missing Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost-server to 10.10.2 or later.

go get github.com/mattermost/mattermost-server@v10.10.2

Affected

introducedfixedlast affected
10.10.010.10.2-

Fixed versions

10.10.2

Sources

CVE-2025-9076 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2025-9076: unknown, EPSS 0.26%

Mattermost Missing Authorization vulnerability in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 10.10.2+incompatible or later.

go get github.com/mattermost/mattermost-server@v10.10.2+incompatible

Affected

introducedfixedlast affected
10.10.0+incompatible10.10.2+incompatible-

Fixed versions

10.10.2+incompatible

Sources

CVE-2025-9076 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2025-9076: unknown, EPSS 0.26%

Mattermost Missing Authorization vulnerability in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-9076 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2025-9076: unknown, EPSS 0.26%

Mattermost Missing Authorization vulnerability in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-9076 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-9076: unknown, EPSS 0.26%

Mattermost Missing Authorization vulnerability in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-9076 · published · modified · JSON