Mattermost

    Dashboard / Vendors

    Products: 18
    Vulnerabilities: 626
    Known Exploited: 0
    21
    Critical Level Threats
    90
    High Level Threats
    383
    Medium Level Threats
    132
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-75587

    Plaintext pre-auth secret exposure via Desktop App diagnostics report

    Last Modified: Aug 19, 2026
    Published: Aug 17, 2026

    CVE-2026-9693

    Mattermost thread memberships persist after team removal, exposing private channel thread metadata on re-invite

    Last Modified: Aug 19, 2026
    Published: Aug 17, 2026

    CVE-2026-9859

    Mattermost Boards plugin didn’t enforce role-based authorization on board channel link allowing board editors to expose boards to arbitrary channels

    Last Modified: Aug 19, 2026
    Published: Aug 17, 2026

    CVE-2026-9816

    Insufficient server-side validation of board member role fields permits privilege escalation

    Last Modified: Aug 19, 2026
    Published: Aug 17, 2026

    CVE-2026-10080

    Boards plugin panics on WebSocket command with non-string field types

    Last Modified: Aug 18, 2026
    Published: Aug 17, 2026
    Items Per Page