Known Vulnerabilities for Teams by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Teams" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103488 json | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project team... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103265 json | Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoi... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-100681 json | Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in t... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100550 json | OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When ... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-91980 json | vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enumerat... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-91774 json | Yao through v1.0.0-rc22 authenticates but fails to authorize the GET /user/teams/:id endpoint, allowing any logged-in user to... | Not Provided | 2026-09-15 | 2026-09-17 |
| CVE-2026-91181 json | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team objects r... | Not Provided | 2026-09-14 | 2026-09-16 |
| CVE-2026-88808 json | A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using... | Not Provided | 2026-09-28 | 2026-09-29 |
| CVE-2026-84808 json | Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-84464 json | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, us... | Not Provided | 2026-09-25 | 2026-09-25 |