CVE-2026-93847 — Vulnerability intelligence
mattermost — mattermost server
Published:
- CVSS
- 3.5
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732