Mattermost Server: Remote Denial of Service
A vulnerability has been discovered in Mattermost Server that allows a remote attacker to cause a denial of service.
CVE search metadata
CVE search record: CVE-2026-116516. Severity: medium. CVSS: 6.5. EPSS: 0.36%. KEV: no. Product: Mattermost Server versions 11.7.x before 11.7.11, Mattermost Server versions 11.8.x before 11.8.6, Mattermost Server versions 11.9.x before 11.9.2, Mattermost Server versions before 11.10.0. Brief: Mattermost Server: Remote Denial of Service. Brief link: https://feed.craftedsignal.io/briefs/2026-10-mattermost-dos/
Triage facts
Revision 1- Applicability
- Mattermost Server versions 11.7.x before 11.7.11, Mattermost Server versions 11.8.x before 11.8.6 +2
- Evidence
- Unknown
- Severity
- Low
- Sources
- 3 public sources
- Freshness
- Revision 1Oct 29, 19:54 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- B2Roughly even chance
A vulnerability exists in Mattermost Server which allows an attacker to perform a remote denial of service. The vulnerability is detailed in Mattermost security bulletin MMSA-2026-00723. Users are advised to refer to the vendor's security bulletin for patch information.