API - API Security Blog

CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability

Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about pu ...

June 11, 2025

CVE-2025-5395

creation_timestamp| type| source ---|---|--- 2025-06-11 09:18:21+00:00| seen|...Read More ...

June 11, 2025

CVE-2025-41662

creation_timestamp| type| source ---|---|--- 2025-06-11 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/114663692500389345 2025-06-11 08:05:02+00:00| seen|...Read More ...

June 11, 2025

CVE-2025-41663

creation_timestamp| type| source ---|---|--- 2025-06-11 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/114663692500389345 2025-06-11 08:05:03+00:00| seen|...Read More ...

June 11, 2025

CVE-2025-41661

creation_timestamp| type| source ---|---|--- 2025-06-11 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/114663692500389345 2025-06-11 08:05:02+00:00| seen|...Read More ...

June 11, 2025

CVE-2020-26879

creation_timestamp| type| source ---|---|--- 2025-06-10 23:03:00+00:00| confirmed|...Read More ...

June 11, 2025

CVE-2019-9879

creation_timestamp| type| source ---|---|--- 2025-06-10 22:14:49+00:00| confirmed|...Read More ...

June 11, 2025

CVE-2025-29756 MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters

SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT ser ...

June 11, 2025