Skip to content
OpenAdvisories

Archive

13 February 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.1

    Time-of-check time-of-use vulnerability in common teams API

    Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /common_teams API endpoint.. Matte…

  • Low 2.5

    Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon

    Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoofing by Improper Validation. This issue affects SafeNet Agent for Windows Logon: 4.0.0, 4.1.1, 4.1.2.

  • Low 2.0

    Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers

    A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the a…