{"id":"EUVD-2026-30750","revision":"c7aa74eccd604545a70207255dc4c3cc","records":[{"revision":"c7aa74eccd604545a70207255dc4c3cc","observedAt":"2026-11-07T09:36:01.543+00:00","statement":{"source":"euvd","id":"EUVD-2026-30750","aliases":["CVE-2026-4286","GHSA-gvg4-jhmr-6j23"],"title":"Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permission to change a playbook's team, bypassing …","description":"Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permission to change a playbook's team, bypassing manage members restriction via PUT api. Mattermost Advisory ID: MMSA-2025-00552","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","score":3.1,"severity":null}],"references":["https://mattermost.com/security-updates"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30750","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 18, 2026, 8:07:06 AM","dateUpdated":"May 18, 2026, 12:41:28 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-30750","identifiers":["EUVD-2026-30750","CVE-2026-4286","GHSA-gvg4-jhmr-6j23"]},"retained":false,"historicalAffected":[]}],"coverage":[]}