Multiple vulnerabilities in Mattermost Desktop App (August 18, 2026)
Multiple vulnerabilities were discovered in Mattermost Desktop App. They allow an attacker to cause data confidentiality compromise and an unspecified security issue by the vendor.
CSIRTS triage
- What
- Multiple vulnerabilities allow data confidentiality compromise and an unspecified security issue.
- Who is affected
- Users running Mattermost Desktop App.
- Urgency
- Unknown severity; data compromise is serious but exact impact and exploitation details are not specified.
- Action
- Update Mattermost Desktop App to a patched version addressing CVE-2026-75587; check advisory for detailed impact.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Mattermost Desktop App
Get an email when a new Mattermost Desktop App advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1040/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-755870.09% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-75587 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
More from CERT-FR Avis de sécurité
- unknownMultiple vulnerabilities in Keycloak (August 25, 2026)2026-08-25
- unknownMultiple vulnerabilities in Cisco IOS XE (August 25, 2026)2026-08-25
- unknownMultiple vulnerabilities in LibreNMS (August 24, 2026)2026-08-24
- unknownMultiple vulnerabilities in Metabase (August 24, 2026)2026-08-24
- unknownVulnerability in SPIP (August 21, 2026)2026-08-21