TNCVE-2026-3116 — Vulnetix

TNCVE-2026-3116 PUBLISHED

Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589

Timeline

Mar 26, 2026 CVE Published

References

Tenable: CVE-2026-3116 advisory

Open in Interactive Console →