Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /common_teams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549 [CVSS 3.1 LOW]
Signature spoofing through improper certificate validation in Thales SafeNet Agent for Windows Logon (versions 4.0.0, 4.1.1, and 4.1.2) permits a low-privileged network attacker who meets specific access prerequisites to present fraudulent certificates the agent accepts without adequate verification. The CVSS 4.0 vector's SC:H/SI:H indicators confirm that a successful exploit can undermine the entire downstream Windows authentication chain - effectively nullifying the MFA or certificate-based logon protection this agent is deployed to enforce. Publicly available exploit code exists per the E:P threat metric in the vendor's CVSS 4.0 vector; no active exploitation has been confirmed and EPSS stands at a low 0.03%.
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface.