CVE-2026-6346

creationtimestamp| type| source ---|---|--- 2026-05-18 10:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4pj4wb2b2i 2026-05-18 18:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5hfq7huy2t 2026-05-21 02:37:09+00:00| seen|...

CVE-2026-6346 Sensitive credentials exposed in plaintext in Mattermost support packets

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet generation, which allows a Mattermost System Admin or any party with access to a support packet to obtain sensitive credentials in...

CVE-2026-6346

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet generation, which allows a Mattermost System Admin or any party with access to a support packet to obtain sensitive credentials in...