Zero Day MonitorZDM

← Back to list

EST

PRE-CVEPATCHED

mattermost

Multiple vulnerabilities in Mattermost products

72% confidence

Description

Multiple vulnerabilities have been discovered in Mattermost products that allow an attacker to cause an unspecified security issue.

Affected Products

Vendor	Product	Versions
mattermost	—	Desktop App 6.3.x < 6.3.1, Desktop App 6.x < 6.2.5, Server 11.10.x < 11.10.3, Server 11.11.x < 11.11.2, Server 11.7.x < 11.7.12

Related News (1 articles)

Tier B

CERT-FR19h ago

Multiples vulnérabilités dans les produits Mattermost (04 novembre 2026)

→ No new info (linked only)

Discussion (0)

Loading…

CISA KEV❌ No

Actively exploited❌ No

Patch available

See affected versions

PublishedNov 4, 2026

Last enriched3h ago

Tags

mattermostmultiple vulnerabilities

Trending Score19

Source articles1

Independent1

Info Completeness5/14

Missing: cve_id, product, cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-93851

Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post

HIGHCVE-2026-116516

Insufficient length validation when parsing Zoom chat transcriptions

LOWCVE-2026-93848

Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator

MEDIUMCVE-2026-13411

Null condition in Playbooks import crashes the plugin

MEDIUMCVE-2026-18799

Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing users

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Nov 4, 2026

Patch Available

Nov 4, 2026

Discovered by ZDM

Nov 4, 2026