mattermost
34 known vulnerabilities affecting mattermost products.
Products
mattermost_server 26
mattermost_desktop 3
focalboard 2
google_drive 1
legal_hold 1
mattermost_mobile 1
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-3524 | Medium | 0.4% | 8.8 | Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing af… | |
| CVE-2026-5740 | Medium | 0.3% | 7.5 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-4858 | Medium | 0.3% | 8.0 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-25773 | Medium | 0.3% | 8.1 | ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize categor… | |
| CVE-2026-9816 | Medium | 0.3% | 8.3 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail… | |
| CVE-2026-8075 | Low | 0.4% | 6.5 | Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check… | |
| CVE-2026-9602 | Low | 0.4% | 6.5 | Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads s… | |
| CVE-2026-10080 | Low | 0.3% | 6.5 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail… | |
| CVE-2026-7521 | Low | 0.3% | 5.5 | Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.… | |
| CVE-2026-4915 | Low | 0.3% | 6.5 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-5308 | Low | 0.3% | 4.9 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-9859 | Low | 0.3% | 6.5 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail… | |
| CVE-2026-4646 | Low | 0.3% | 4.3 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-5755 | Low | 0.2% | 6.5 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.2, 11.5.x <= 11.5.3, 11.4.x… | |
| CVE-2026-10819 | Low | 0.2% | 6.5 | Mattermost versions 11.6.x <= 11.6.5, 10.11.x <= 10.11.20, 11.8.x <= 11.8.1, 11.… | |
| CVE-2026-14298 | Low | 0.2% | 6.5 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.… | |
| CVE-2026-28736 | Low | 0.2% | 4.3 | ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ow… | |
| CVE-2026-10600 | Low | 0.2% | 4.3 | Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.… | |
| CVE-2026-16045 | Low | 0.2% | 4.3 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 Mattermost failed to r… | |
| CVE-2026-3636 | Low | 0.2% | 4.3 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-4635 | Low | 0.2% | 6.5 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-16044 | Low | 0.2% | 5.4 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest … | |
| CVE-2026-16047 | Low | 0.2% | 4.3 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail… | |
| CVE-2026-9693 | Low | 0.2% | 3.5 | Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to re… | |
| CVE-2026-10527 | Low | 0.2% | 6.3 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail… | |
| CVE-2026-16048 | Low | 0.2% | 6.3 | Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail… | |
| CVE-2026-16046 | Low | 0.2% | 4.3 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to enforce run-st… | |
| CVE-2026-4055 | Low | 0.2% | 4.3 | Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create perm… | |
| CVE-2026-15754 | Low | 0.2% | 4.2 | Mattermost versions 11.7.x <= 11.7.6, 11.8.x <= 11.8.3 The access control policy… | |
| CVE-2026-3473 | Low | 0.1% | 5.9 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-28735 | Low | 0.1% | 5.4 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.… | |
| CVE-2026-2299 | Low | 0.1% | 4.2 | The Mattermost Google Drive plugin before version 1.1.0 fails to validate channe… | |
| CVE-2026-22880 | Low | 0.1% | 6.1 | Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11… | |
| CVE-2026-75587 | Low | 0.1% | 3.6 | Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret… |