CERT-FR: multiple unspecified vulnerabilities in Mattermost Server 11.7.x, 11.10.x and 11.11.x
CERT-FR published advisory CERTFR-2026-AVI-1348 on 21 October 2026 about multiple vulnerabilities in Mattermost Server. The vendor has not specified the nature or impact of the flaws, and the advisory says only that an attacker could cause an unspecified security problem. The advisory cites Mattermost security bulletins MMSA-2026-00772 and MMSA-2026-00783, both dated 20 October 2026. It reports no CVE identifiers, no exploitation in the wild and no technical details.
Detalhes técnicos
- Affected: Mattermost Server 11.10.x before 11.10.3, 11.11.x before 11.11.2, and 11.7.x before 11.7.13.
- The vulnerability types, CVSS scores and attack vectors are not specified by the vendor.
Remediação
- Upgrade to a fixed version: 11.10.3, 11.11.2 or 11.7.13, depending on the branch in use.
- Consult the Mattermost security updates page (https://mattermost.com/security-updates/) and the bulletins MMSA-2026-00772 and MMSA-2026-00783 for patch details.
Linha do tempo
-
CERT-FR: multiple unspecified vulnerabilities in Mattermost Server 11.7.x, 11.10.x and 11.11.x
ler a análise desta fonte ocultar
CERT-FR published advisory CERTFR-2026-AVI-1348 on 21 October 2026 about multiple vulnerabilities in Mattermost Server. The vendor has not specified the nature or impact of the flaws, and the advisory says only that an attacker could cause an unspecified security problem. The advisory cites Mattermost security bulletins MMSA-2026-00772 and MMSA-2026-00783, both dated 20 October 2026. It reports no CVE identifiers, no exploitation in the wild and no technical details.
Technical Details
- Affected: Mattermost Server 11.10.x before 11.10.3, 11.11.x before 11.11.2, and 11.7.x before 11.7.13.
- The vulnerability types, CVSS scores and attack vectors are not specified by the vendor.
Remediation
- Upgrade to a fixed version: 11.10.3, 11.11.2 or 11.7.13, depending on the branch in use.
- Consult the Mattermost security updates page (https://mattermost.com/security-updates/) and the bulletins MMSA-2026-00772 and MMSA-2026-00783 for patch details.