Threat Intel

v0.1

← CVEs

CVE-2026-2461

MED 4.3
Published
2026-03-16
Last Modified
2026-03-20
Affected Apps
1
Affected Devices
1
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisory ID: MMSA-2025-00559
Affected Applications in Environment 1
server v1.0.0.0
1 device
Affected Devices 1
EBB107-01 Windows
References 1