Mattermost CVEs · CVE Brief https://cvebrief.com/archive/cves/vendor/mattermost/ High and critical Mattermost vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Tue, 18 Aug 2026 12:00:00 GMT CVE-2026-9816 · CVSS 8.3 · Mattermost https://cvebrief.com/cve/cve-2026-9816/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-9816 Tue, 18 Aug 2026 12:00:00 GMT Mattermost versions 11 Fix documented: 11.9.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-7387 · CVSS 8.8 · Mattermost https://cvebrief.com/cve/cve-2026-7387/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-7387 Sat, 13 Jun 2026 12:00:00 GMT Mattermost versions 11 Fix documented: 11.7.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-4858 · CVSS 8.0 · Mattermost https://cvebrief.com/cve/cve-2026-4858/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-4858 Fri, 22 May 2026 12:00:00 GMT Mattermost versions 11 Fix documented: 11.7.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-6346 · CVSS 8.7 · Mattermost https://cvebrief.com/cve/cve-2026-6346/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-6346 Tue, 19 May 2026 12:00:00 GMT Mattermost versions 11 Fix documented: 11.6.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-6347 · CVSS 7.6 · Mattermost https://cvebrief.com/cve/cve-2026-6347/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-6347 Tue, 19 May 2026 12:00:00 GMT Mattermost versions 11 Fix documented: 11.6.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-3524 · CVSS 8.8 · Mattermost https://cvebrief.com/cve/cve-2026-3524/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-3524 Mon, 06 Apr 2026 12:00:00 GMT Mattermost Plugin Legal Hold versions <=1 Fix documented: 1.1.5 (CVE record). Independent analyst report on CVE Brief. CVE-2026-25773 · CVSS 8.1 · Focalboard https://cvebrief.com/cve/cve-2026-25773/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-25773 Sat, 04 Apr 2026 12:00:00 GMT ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8 Independent analyst report on CVE Brief. CVE-2026-3108 · CVSS 8.0 · Mattermost https://cvebrief.com/cve/cve-2026-3108/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-3108 Sat, 28 Mar 2026 12:00:00 GMT Mattermost versions 11 Fix documented: 11.5.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-24458 · CVSS 7.5 · Mattermost https://cvebrief.com/cve/cve-2026-24458/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-24458 Tue, 17 Mar 2026 12:00:00 GMT Mattermost versions 11 Fix documented: 11.4.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-2476 · CVSS 7.6 · Mattermost https://cvebrief.com/cve/cve-2026-2476/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-2476 Tue, 17 Mar 2026 12:00:00 GMT Mattermost Plugins versions <=2 Fix documented: 2.3.1.0 (CVE record). Independent analyst report on CVE Brief. CVE-2026-1046 · CVSS 7.6 · Mattermost https://cvebrief.com/cve/cve-2026-1046/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2026-1046 Tue, 17 Feb 2026 12:00:00 GMT Mattermost Desktop App versions <=6 Fix documented: 6.1.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-13523 · CVSS 7.7 · Mattermost Confluence Plugin https://cvebrief.com/cve/cve-2025-13523/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-13523 Sat, 07 Feb 2026 12:00:00 GMT Mattermost Confluence plugin version <1 Fix documented: 1.7.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-14273 · CVSS 7.2 · Mattermost https://cvebrief.com/cve/cve-2025-14273/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-14273 Tue, 23 Dec 2025 12:00:00 GMT Mattermost versions 11 Fix documented: 11.2.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-12419 · CVSS 9.9 · Mattermost https://cvebrief.com/cve/cve-2025-12419/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-12419 Fri, 28 Nov 2025 12:00:00 GMT Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation privileges to take over a user account via m Fix documented: 11.1.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-12421 · CVSS 9.9 · Mattermost https://cvebrief.com/cve/cve-2025-12421/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-12421 Fri, 28 Nov 2025 12:00:00 GMT Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specia Fix documented: 11.1.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-58073 · CVSS 8.1 · Mattermost https://cvebrief.com/cve/cve-2025-58073/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-58073 Thu, 16 Oct 2025 12:00:00 GMT Mattermost versions 10 Fix documented: 10.12.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-58075 · CVSS 8.1 · Mattermost https://cvebrief.com/cve/cve-2025-58075/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-58075 Thu, 16 Oct 2025 12:00:00 GMT Mattermost versions 10 Fix documented: 10.12.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-9079 · CVSS 8.0 · Mattermost https://cvebrief.com/cve/cve-2025-9079/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-9079 Fri, 19 Sep 2025 12:00:00 GMT Mattermost versions 10 Fix documented: 10.11.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-9072 · CVSS 7.6 · Mattermost https://cvebrief.com/cve/cve-2025-9072/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-9072 Mon, 15 Sep 2025 12:00:00 GMT Mattermost versions 10 Fix documented: 10.11.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-44004 · CVSS 7.2 · Mattermost Confluence Plugin https://cvebrief.com/cve/cve-2025-44004/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-44004 Mon, 11 Aug 2025 12:00:00 GMT Mattermost Confluence Plugin version <1 Fix documented: 1.5.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-52931 · CVSS 7.5 · Mattermost Confluence Plugin https://cvebrief.com/cve/cve-2025-52931/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-52931 Mon, 11 Aug 2025 12:00:00 GMT Mattermost Confluence Plugin version <1 Fix documented: 1.5.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-54478 · CVSS 7.2 · Mattermost Confluence Plugin https://cvebrief.com/cve/cve-2025-54478/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-54478 Mon, 11 Aug 2025 12:00:00 GMT Mattermost Confluence Plugin version <1 Fix documented: 1.5.0 (CVE record). Independent analyst report on CVE Brief. CVE-2025-54525 · CVSS 7.5 · Mattermost Confluence Plugin https://cvebrief.com/cve/cve-2025-54525/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-mattermost-CVE-2025-54525 Mon, 11 Aug 2025 12:00:00 GMT Mattermost Confluence Plugin version <1 Fix documented: 1.5.0 (CVE record). Independent analyst report on CVE Brief.