Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-3116 EUVD-2026-16246

Improper Input Validation in Zoom Plugin Webhook Handler

Published Mar 26, 2026 · Updated Mar 26, 2026 · Assigned by Mattermost

Vendor: Mattermost Product: Mattermost

Description

Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 11.0.4, ≤ 11.1.3, ≤ 11.3.2, ≤ 10.11.11 11.5.0

References