7591 matches found
PT-2026-76667
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which allows a user demoted to System Guest to retain Board Admin privileges and perform admin-only operations via the Boards REST API or UI.. Mattermost Adviso...
PT-2026-76668
Mattermost versions 11.7.x = 11.7.6, 11.8.x = 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC attribute-based access control policy...
PT-2026-76669
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive import which allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file. Mattermost Advisory ID:...
PT-2026-76876
Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.6 Mattermost versions 10.11.0 through 10.11.21 Mattermost versions 11.8.0 through 11.8.3 Description Insufficient server-side validation of BoardMember.Scheme fields during insert and archive-import...
PT-2026-76877
Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.6 Mattermost versions 10.11.0 through 10.11.21 Mattermost versions 11.8.0 through 11.8.3 Description The Boards plugin fails to enforce the PermissionManageBoardRoles authorization on the channelId field...
PT-2026-76874
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 6.2.2.0 Description The application fails to redact the pre-auth secret during the generation of a diagnostics report. A local attacker with access to the user's log files or diagnostics report can obta...
PT-2026-76867
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash the plugin process and deny service to all Boards users via a custom focalboard SUBSCRIBE TEAM message with a non-string teamId...
PT-2026-76671
Mattermost Plugins versions =11.8 10.20.11 11.5.7.0 The Mattermost GitLab plugin fails to verify channel permissions when processing API requests with a caller-supplied post id , and fails to validate the web url parameter against the configured GitLab instance, which allows an authenticated...
PT-2026-76875
Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.20 Mattermost versions 11.7.0 through 11.7.5 Description The software fails to remove thread membership records when a user leaves or is removed from a team. This allows a user who is subsequently...
PT-2026-76670
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 Mattermost failed to restrict OAuth deauthorization and personal access token management endpoints to direct user sessions, which allowed an OAuth app with a delegated user token to revoke the user's authorizations or tokens for other...
GO-2026-6222 vulnerabilities
Vulnerabilities for packages: seaweedfs-fips, seaweedfs-operator-fips, seaweedfs-rocksdb, fortio-fips, mailpit, kubescape-server-fips, gitea-fips, seaweedfs-operator, pdfcpu, rclone, gitea, kitty, mailpit-fips, seaweedfs-rocksdb-fips, nemo, ollama-fips, rclone-fips, mattermost, kubescape, ollama,...
CVE-2026-46603 vulnerabilities
Vulnerabilities for packages: seaweedfs-fips, seaweedfs-operator-fips, seaweedfs-rocksdb, fortio-fips, mailpit, kubescape-server-fips, gitea-fips, seaweedfs-operator, pdfcpu, rclone, gitea, kitty, mailpit-fips, seaweedfs-rocksdb-fips, nemo, ollama-fips, rclone-fips, mattermost, kubescape, ollama,...
GO-2026-6222 vulnerabilities
Vulnerabilities for packages: gitea, mattermost, bento, rclone, seaweedfs, kubescape, mailpit, kitty, ollama, pdfcpu...
CVE-2026-46603 vulnerabilities
Vulnerabilities for packages: gitea, mattermost, bento, rclone, seaweedfs, kubescape, mailpit, kitty, ollama, pdfcpu...
GO-2025-3599 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GO-2025-3642 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GO-2025-3644 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GO-2025-3604 vulnerabilities
Vulnerabilities for packages: mattermost-fips...