Mattermost

A security policy bypass vulnerability in Mattermost Server could allow an attacker to circumvent configured server security policies.

Mattermost has released a security advisory addressing multiple vulnerabilities affecting versions up to 11.10.0 and earlier maintenance releases.

Multiple unspecified vulnerabilities have been identified in Mattermost Server, requiring immediate review of vendor security bulletins and application of necessary patches.

Mattermost has released critical security patches for multiple versions to address vulnerabilities tracked under CVE-2026-9816.

Multiple unspecified vulnerabilities in Mattermost Desktop App and Mattermost Server allow an attacker to cause an unspecified security issue.

Attackers may attempt to evade defenses by masquerading malicious processes as legitimate communication applications such as Slack, WebEx, Teams, Discord, RocketChat, Mattermost, WhatsApp, Zoom, Outlook and Thunderbird.