Vendor

Mattermost

512 known vulnerabilities.

Products

Mattermost 480 Mattermost Confluence Plugin 14 Mattermost Desktop 3 Mattermost Boards 2 Focalboard 2 Mattermost App Framework 2 Mattermost Playbooks 2 Mattermost Plugins 1 github.com/mattermost/mattermost/server/public 1 Mattermost iOS app 1 Playbooks Plugin 1 Mattermost Mobile 1 Mattermost Google Drive Plugin 1 Mattermost Github Plugin 1 Mattermost < 7.8.12 0 Mattermost < 9.0.1 0 Mattermost < 8.0.4 0 Mattermost < 8.1.3 0 Mattermost < 7.1.9 0 Mattermost < 7.8.4 0 Mattermost < 7.9.3 0 Mattermost < 7.10.0 0 Mattermost Desktop App < 5.3.0 0 Mattermost < v7.8.5 0 Mattermost < v7.10.1 0 Mattermost < v7.9.4 0 Mattermost < v7.8.7 0 Mattermost < 7.9.5 0 Mattermost < 7.10.3 0 Mattermost Mobile Apps < 2.5.1 0 Mattermost < 7.7.2 0 Mattermost < 7.1.6 0 Mattermost < v8.1.5 0 Mattermost < 7.8.14 0 Mattermost Server < 7.5.2 0 Mattermost < 9.0.3 0 Mattermost Server < 7.4.1 0 Mattermost < v9.1.2 0 Mattermost Server < 7.1.5 0 Mattermost < 7.9.0 0

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2026-2461 Public exploit

Missing authorization check allows unauthorized modification of other users' comments on a board

Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisor…

Mattermost Mattermost github.com/mattermost/mattermost-plugin-boards Go

Mar 16, 2026
Medium 4.9

CVE-2023-5968 Public exploit

Password hash in response body after username update

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body.

Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go

Nov 6, 2023