{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/mattermost-server-11.7.x--11.7.11-11.8.x--11.8.6-11.9.x--11.9.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-93851"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mattermost Server (11.7.x \u003c 11.7.11, 11.8.x \u003c 11.8.6, 11.9.x \u003c 11.9.2)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","security-policy-bypass"],"_cs_type":"advisory","_cs_vendors":["Mattermost"],"content_html":"\u003cp\u003eA security policy bypass vulnerability has been identified in Mattermost Server. The vulnerability is tracked as CVE-2026-93851 and impacts specific versions of the 11.7.x, 11.8.x, and 11.9.x branches. The vulnerability allows an attacker to circumvent security policies configured on the server instance.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows for the bypass of security policies enforced on the Mattermost Server, which may lead to unauthorized access or the circumvention of intended access controls.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Mattermost Server installations to the patched versions as specified by the vendor in MMSA-2026-00742.\u003c/li\u003e\n\u003cli\u003ePatch affected versions:\u003c/li\u003e\n\u003cli\u003e11.7.x to 11.7.11 or later\u003c/li\u003e\n\u003cli\u003e11.8.x to 11.8.6 or later\u003c/li\u003e\n\u003cli\u003e11.9.x to 11.9.2 or later\u003c/li\u003e\n\u003cli\u003eMonitor audit logs for anomalous administrative or access control modification events that do not correlate with known administrator activity.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T18:36:35Z","date_published":"2026-10-29T18:36:35Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mattermost-bypass/","summary":"A security policy bypass vulnerability in Mattermost Server could allow an attacker to circumvent configured server security policies.","title":"Mattermost Server: Security policy bypass (CVE-2026-93851)","url":"https://feed.craftedsignal.io/briefs/2026-10-mattermost-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Mattermost Server (11.7.x \u003c 11.7.11, 11.8.x \u003c 11.8.6, 11.9.x \u003c 11.9.2)","version":"https://jsonfeed.org/version/1.1"}