{"id":"EUVD-2025-186558","enisaUuid":"46ed80df-776d-34b9-92d1-6401d974b019","description":"Mattermost versions \u003c11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the `/api/v4/teams/{team_id}/channels/search_archived` endpoint","datePublished":"Nov 14, 2025, 7:58:52 AM","dateUpdated":"Nov 14, 2025, 3:49:13 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://mattermost.com/security-updates\n","aliases":"CVE-2025-11776\nGHSA-j6gg-r5jc-47cm\n","assigner":"Mattermost","epss":0.21,"enisaIdProduct":[{"id":"374fa91a-a0fc-3b3c-b50f-c3e82129f552","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"\u003c11 ≤\u003c11"}],"enisaIdVendor":[{"id":"5531157a-ced2-3690-bf80-9abb5c82de02","vendor":{"name":"Mattermost"}}],"enisaIdVulnerability":[{"id":"93df913c-d111-3754-b2fe-3c7bcc54ac36","vulnerability":{"id":"CVE-2025-11776","description":"Mattermost versions \u003c11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the `/api/v4/teams/{team_id}/channels/search_archived` endpoint","datePublished":"Nov 14, 2025, 7:58:52 AM","dateUpdated":"Nov 14, 2025, 3:49:13 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-186558\n","assigner":"Mattermost","epss":0.21,"dataProcessed":"Oct 31, 2026, 7:16:15 AM","vulnerabilityProduct":[{"id":"023eb0cf-10e8-3d23-88b6-58f866854979","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"\u003c11 ≤\u003c11"}],"vulnerabilityVendor":[{"id":"331c3797-8d83-3e40-8948-f5b8c21f5997","vendor":{"name":"Mattermost"}}]}},{"id":"bb0a14c4-68f5-3907-a65a-0d7dfa4b4748","vulnerability":{"id":"GHSA-j6gg-r5jc-47cm","description":"Mattermost fails to properly restrict access to archived channel search API","datePublished":"Nov 14, 2025, 9:30:27 AM","dateUpdated":"Nov 14, 2025, 10:08:04 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-11776\nhttps://github.com/mattermost/mattermost/commit/c8d66301415d5b447df0e829bdbaa92e8a83ecf8\nhttps://mattermost.com/security-updates\ngithub.com/mattermost/mattermost\n","enisa_id":"EUVD-2025-186558\n","aliases":"CVE-2025-11776\nGHSA-j6gg-r5jc-47cm\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}