poslední zpráva · zachyceno
SPOJENO PŘES CVE EPSS 0.00
Mattermost: Insufficient server-side validation of board member role fields permits privilege escalation
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.3, CVEs: CVE-2026-9816, Summary: Mattermost versions 11.7.x
Mattermost FI CA IT
CVE v události 1
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-9816 | 8.3 3.1 · Mattermost | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.3.
Jak se o tom psalo 3
-
· zachyceno · NCSC-FI FI nadpis události
Mattermost: Insufficient server-side validation of board member role fields permits privilege escalation
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.3, CVEs: CVE-2026-9816, Summary: Mattermost versions 11.7.x
-
· Cyber Centre Kanada CA
Mattermost security advisory (AV26-828)
Serial Number: AV26-828Date: August 18, 2026 As of August 17, 2026, Mattermost is affected by vulnerabilities in the following product: Mattermost Prior to or equal to 10.11.21 Prior to or equal to 11.7.6 Prior to or equal to 11.8.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-9816 Detail Mattermost Security Updates
-
· CSIRT Itálie (ACN) IT
Rilevate vulnerabilità in Mattermost
Rilevate nuove vulnerabilità, di cui una con gravità “alta”, in Mattermost, piattaforma di collaborazione open-source progettata per la comunicazione interna di organizzazioni e aziende. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a utenti malintenzionati di elevare i propri privilegi sui sistemi interessati.