Browse CVEs

MEDIUM 6.5 CVE-2026-10080 Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field types which allows an authentic… Mattermost Server Fix unknown Fix from $4,0002026-08-17 MEDIUM 6.3 CVE-2026-16048 Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict channel member role assignment to channel-scoped roles w… Mattermost Server Fix unknown Fix from $4,0002026-08-17 MEDIUM 6.3 CVE-2026-10527 Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which all… Mattermost Server Fix unknown Fix from $4,0002026-08-17 MEDIUM 5.4 CVE-2026-16044 Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive impo… Mattermost Server Fix unknown Fix from $4,0002026-08-17 MEDIUM 6.5 CVE-2026-14298 Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to properly limit resource consumption when proces… Mattermost Server No fix yet Fix from $4,0002026-08-13 MEDIUM 6.5 CVE-2026-25773 ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reor… Focalboard Mitigation only Fix from $1,6002026-04-03 CRITICAL 9.1 CVE-2023-2193 Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code t… Mattermost Mitigation only Fix from $2,3002023-04-20 MEDIUM 6.5 CVE-2022-4045 A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoint… Mattermost Mitigation only Fix from $1,6002022-11-23 MEDIUM 6.5 CVE-2022-4019 A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to … Mattermost Mitigation only Fix from $1,6002022-11-23