Multiple vulnerabilities in Mattermost Server (July 20, 2026)
Multiple vulnerabilities have been discovered in Mattermost Server. They allow an attacker to cause an unspecified security issue by the vendor.
CSIRTS triage
- What
- Multiple vulnerabilities have been discovered in Mattermost Server that allow an attacker to cause an unspecified security issue.
- Who is affected
- Deployments of Mattermost Server are affected.
- Urgency
- Remediation urgency is unknown due to lack of specific details on the vulnerabilities.
- Action
- Monitor for updates from Mattermost regarding these vulnerabilities.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Mattermost Server
Get an email when a new Mattermost Server advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0902/
Recent advisories for Mattermost Server
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[UPDATE] [medium] Mattermost Server: Multiple vulnerabilitiescert-bund · 2026-07-28
- mediumCVE-2026-10600: Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.x <= 10.11.20 …nvd · 2026-07-27
- mediumCVE-2026-9602: Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Ma…nvd · 2026-07-17
- unknownMultiple vulnerabilities in Mattermost Server (June 29, 2026)cert-fr-avis · 2026-06-29
- mediumCVE-2026-9699: Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses fr…nvd · 2026-06-26
More from CERT-FR Avis de sécurité
- unknownMultiples vulnérabilités dans le noyau Linux de SUSE (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux de Debian LTS (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans les produits IBM (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux d'Ubuntu (31 juillet 2026)2026-07-31