/
← Voltar ao feed
medium

CERT-FR: Multiple unspecified vulnerabilities patched in Mattermost Server 11.7 to 11.11 branches

1 fonte(s) · 1 atualização(ões) · publicado 19/10/2026 21:00 · coletado há 6 horas

CERT-FR advisory CERTFR-2026-AVI-1344 reports multiple vulnerabilities in Mattermost Server. The vendor did not specify the security impact. The advisory covers fixes announced in Mattermost security bulletins dated 19 October 2026. It does not mention active exploitation, CVE identifiers, IOCs or attribution.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1344 reports multiple vulnerabilities in Mattermost Server, but the vendor did not specify the security impact. No CVE IDs, vulnerability types, attack vectors, privileges required or CVSS scores are given. The affected versions are 11.7.x before 11.7.12, 11.8.x before 11.8.6, 11.10.x before 11.10.3 and 11.11.x before 11.11.2. The fixes are in those versions or later. The advisory ties them to the Mattermost bulletins MMSA-2026-00720, -00721, -00740, -00743, -00744, -00745, -00746, -00749, -00750, -00751, -00753, -00755, -00780, -00784 and -00785.

Como foi descoberta

The articles do not say who found the flaws or how. They only say that Mattermost published the security bulletins on 19 October 2026 and that CERT-FR summarized them in an advisory dated 20 October 2026. The advisory does not mention active exploitation, IOCs or attribution.

Explicação gerada por IA a partir da matéria e dos artigos, em 22/10/2026 13:19.

Detalhes técnicos

  • Affected: Mattermost Server 11.7.x before 11.7.12, 11.8.x before 11.8.6, 11.10.x before 11.10.3 and 11.11.x before 11.11.2.
  • Vendor bulletins referenced: MMSA-2026-00720, -00721, -00740, -00743, -00744, -00745, -00746, -00749, -00750, -00751, -00753, -00755, -00780, -00784 and -00785.
  • The advisory gives no vulnerability type, attack vector or CVSS scores.

Remediação

  • Consult the Mattermost security bulletins at mattermost.com/security-updates to obtain the patches.
  • Upgrade to 11.7.12, 11.8.6, 11.10.3 or 11.11.2, or later, depending on the branch in use.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 19/10/2026 21:00 · coletado 22/10 13:01 primeiro registro

    CERT-FR: Multiple unspecified vulnerabilities patched in Mattermost Server 11.7 to 11.11 branches

    ler a análise desta fonte

    CERT-FR advisory CERTFR-2026-AVI-1344 reports multiple vulnerabilities in Mattermost Server. The vendor did not specify the security impact. The advisory covers fixes announced in Mattermost security bulletins dated 19 October 2026. It does not mention active exploitation, CVE identifiers, IOCs or attribution.

    Technical Details

    • Affected: Mattermost Server 11.7.x before 11.7.12, 11.8.x before 11.8.6, 11.10.x before 11.10.3 and 11.11.x before 11.11.2.
    • Vendor bulletins referenced: MMSA-2026-00720, -00721, -00740, -00743, -00744, -00745, -00746, -00749, -00750, -00751, -00753, -00755, -00780, -00784 and -00785.
    • The advisory gives no vulnerability type, attack vector or CVSS scores.

    Remediation

    • Consult the Mattermost security bulletins at mattermost.com/security-updates to obtain the patches.
    • Upgrade to 11.7.12, 11.8.6, 11.10.3 or 11.11.2, or later, depending on the branch in use.