Skip to content
Threat Feed

Vendor

Mattermost Inc.

2 briefs RSS
medium advisory

Mattermost Uncontrolled Resource Consumption Vulnerability (CVE-2026-5308)

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to enforce request body size limits on plugin HTTP endpoints, allowing an attacker to cause a denial of service via crafted oversized HTTP requests.

Mattermost Server dos cve webserver
2r 1t
medium threat

Mattermost File Access Vulnerability (CVE-2026-3473)

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, allowing an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.

Mattermost Server cve vulnerability mattermost authorization bypass
1r 1t 1c