EN PT-BR
← Voltar ao feed
medium

CERT-FR advisory: remote denial of service vulnerability in Mattermost Server (CVE-2026-116516)

1 fonte(s) · 1 atualização(ões) · publicado 26/10/2026 21:00 · coletado há 3 dias

CERT-FR published advisory CERTFR-2026-AVI-1388 on 27 October 2026 regarding a vulnerability in Mattermost Server that allows a remote attacker to cause a denial of service. The issue is tracked as CVE-2026-116516 and was disclosed in Mattermost security bulletin MMSA-2026-00723 of 26 October 2026. Affected branches are 11.7.x before 11.7.11, 11.8.x before 11.8.6, 11.9.x before 11.9.2 and all versions prior to 11.10.0. No exploitation in the wild, CVSS score or IOCs are mentioned.

Entenda a falha

A vulnerabilidade

CVE-2026-116516 is a remote denial-of-service vulnerability in Mattermost Server. The sources do not name the component, and they say nothing about authentication, configuration or user interaction, or about a CVSS score. An attacker can make the service unavailable remotely. Affected: 11.7.x before 11.7.11, 11.8.x before 11.8.6, 11.9.x before 11.9.2, and all versions before 11.10.0. Fixed versions are those listed in Mattermost bulletin MMSA-2026-00723.

Como funciona

The sources do not describe how the vulnerable process works. They say only that a remote attacker can cause a denial of service in Mattermost Server. They give no information on which input or request is involved, or at which step the server fails.

Por que é vulnerável

The root cause is not described in the CERT-FR advisory or the story. Neither explains why the flaw went unnoticed or what the fix changes. Details may be in Mattermost bulletin MMSA-2026-00723, which the articles reference but do not quote.

Como foi descoberta

Mattermost disclosed the flaw in security bulletin MMSA-2026-00723 on 26 October 2026, and CERT-FR republished it as advisory CERTFR-2026-AVI-1388 on 27 October 2026. The sources do not say who found it or how it was reported. They mention no exploitation in the wild.

Explicação gerada por IA a partir da matéria e dos artigos, em 29/10/2026 13:20.

Detalhes técnicos

  • Impact: remote denial of service.
  • Affected: Mattermost Server 11.7.x < 11.7.11, 11.8.x < 11.8.6, 11.9.x < 11.9.2, and versions < 11.10.0.

Remediação

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 26/10/2026 21:00 · coletado 29/10 13:01 primeiro registro

    CERT-FR advisory: remote denial of service vulnerability in Mattermost Server (CVE-2026-116516)

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1388 on 27 October 2026 regarding a vulnerability in Mattermost Server that allows a remote attacker to cause a denial of service. The issue is tracked as CVE-2026-116516 and was disclosed in Mattermost security bulletin MMSA-2026-00723 of 26 October 2026. Affected branches are 11.7.x before 11.7.11, 11.8.x before 11.8.6, 11.9.x before 11.9.2 and all versions prior to 11.10.0. No exploitation in the wild, CVSS score or IOCs are mentioned.

    Technical Details

    • Impact: remote denial of service.
    • Affected: Mattermost Server 11.7.x < 11.7.11, 11.8.x < 11.8.6, 11.9.x < 11.9.2, and versions < 11.10.0.

    Remediation