CVE-2026-20719 — Vulnetix

Try Vulnetix Request Demo

CVE-2026-20719 PUBLISHED CVSS 4.300000190734863 MEDIUM

De multiples vulnérabilités ont été découvertes dans Mattermost Server. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une injection de requêtes illégitimes par rebond (CSRF) et un contournement de la politique de sécurité.

Risk Scores

CVSS v3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor	Product	Versions
mattermost	mattermost_server	10.11.0, 11.4.0, 11.3.0
Mattermost	Mattermost	11.4.0, 11.3.0, 11.2.0
Mattermost	Mattermost Server
github.com	mattermost/mattermost/server/v8	11.2.0-rc1, 8.0.0-20260105080200-d27a2195068d, 10.11.0-rc1

Timeline

Feb 24, 2026 CVE Published
Mar 25, 2026 Coalition ESS Score
Mar 25, 2026 PoC Published
Mar 26, 2026 CVE Updated
Mar 26, 2026 PoC Published
Mar 31, 2026 Security Advisory

References

https://mattermost.com/security-updates/ advisory
MMSA-2025-00566 vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-20719 advisory
https://github.com/mattermost/mattermost package

Open in Interactive Console →