Vulnerability index

Browse CVEs

9 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Mattermost Server MEDIUM 6.5
CVE-2026-10080

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field types which allows an authentic…

Fix unknown
Fix from $4,000 2026-08-17
Mattermost Server MEDIUM 6.3
CVE-2026-16048

Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict channel member role assignment to channel-scoped roles w…

Fix unknown
Fix from $4,000 2026-08-17
Mattermost Server MEDIUM 6.3
CVE-2026-10527

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which all…

Fix unknown
Fix from $4,000 2026-08-17
Mattermost Server MEDIUM 5.4
CVE-2026-16044

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive impo…

Fix unknown
Fix from $4,000 2026-08-17
Mattermost Server MEDIUM 6.5
CVE-2026-14298

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to properly limit resource consumption when proces…

No fix yet
Fix from $4,000 2026-08-13
Focalboard MEDIUM 6.5
CVE-2026-25773

** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reor…

Mitigation only
Fix from $1,600 2026-04-03
Mattermost CRITICAL 9.1
CVE-2023-2193

Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code t…

Mitigation only
Fix from $2,300 2023-04-20
Mattermost MEDIUM 6.5
CVE-2022-4045

A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoint…

Mitigation only
Fix from $1,600 2022-11-23
Mattermost MEDIUM 6.5
CVE-2022-4019

A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to …

Mitigation only
Fix from $1,600 2022-11-23