CVE-2026-93847Low· 3.5▾ SunlitMattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events vi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 19.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732
Mattermost >= 11.7.0 <= 11.7.10Update Mattermost to versions 11.11.0, 11.7.11 or higher.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-93846Low· 3.8Team admin can escalate a team member's permissions via the team member roles endpoint
CVE-2026-18551Medium· 6.5Mattermost guest account privilege escalation via member roles API
CVE-2026-19076Medium· 4.4Mattermost fails to reject OAuth application sessions in account type switch, allowing account takeover via bearer token
CVE-2026-18256Medium· 4.3Private team metadata disclosure via the team search API
CVE-2026-18223Medium· 5.0Mattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel access
CVE-2026-93850Medium· 6.5Unbounded memory consumption during PDF text extraction