Back to feed
EUVD-2026-16246 · Published Mar 26, 2026
Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589
Technologies
Mattermost Mattermost Server
Weaknesses
CWE-400
CVSS scores
- v3.14.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Impact
References
Potentially impacted assets
See if this affects your attack surface
