Mattermost

    Dashboard / Vendors

    Products: 18
    Vulnerabilities: 671
    Known Exploited: 0
    21
    Critical Level Threats
    93
    High Level Threats
    420
    Medium Level Threats
    137
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-93851

    Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post

    Last Modified: Oct 29, 2026
    Published: Oct 28, 2026

    CVE-2026-93846

    Team admin can escalate a team member's permissions via the team member roles endpoint

    Last Modified: Nov 02, 2026
    Published: Oct 26, 2026

    CVE-2026-93848

    Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator

    Last Modified: Nov 02, 2026
    Published: Oct 26, 2026

    CVE-2026-93850

    Unbounded memory consumption during PDF text extraction

    Last Modified: Nov 02, 2026
    Published: Oct 26, 2026

    CVE-2026-93849

    Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket frames

    Last Modified: Nov 02, 2026
    Published: Oct 26, 2026
    Items Per Page
    Mattermost Vulnerabilities & Security CVEs | CVE-DB