CVE-2026-2461 — Vulnetix

Try Vulnetix Request Demo

CVE-2026-2461 PUBLISHED CVSS 4.300000190734863 MEDIUM

Mattermost Boards Plugin fails to implement authorisation checks on comment block modifications

EPSS 0.03% · 8.9th percentile

Risk Scores

CVSS v3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS Score

0.03%

8.9th percentile

Affected Products

Vendor	Product	Versions
github.com	mattermost/mattermost-plugin-boards	0, 0
Mattermost	Mattermost	10.11.11, 11.2.3, 10.11.11
mattermost	mattermost_server	11.3.0, 0, 11.0.0

Timeline

Mar 16, 2026 CVE Published
Mar 16, 2026 EPSS Score
Mar 17, 2026 EPSS Score
Mar 18, 2026 EPSS Score
Mar 19, 2026 CVE Updated
Mar 19, 2026 EPSS Score
Mar 20, 2026 EPSS Score
Mar 20, 2026 Security Advisory
Mar 21, 2026 EPSS Score
Mar 22, 2026 EPSS Score
Mar 22, 2026 Coalition ESS Score
Mar 23, 2026 EPSS Score

References

MMSA-2025-00559 vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-2461 advisory
https://github.com/mattermost/mattermost-plugin-boards/commit/57c5be5b6ef59d02dd72e35094d1fae8ba6e9619 url
https://github.com/mattermost/mattermost-plugin-boards package

Open in Interactive Console →