Vendor

Mattermost

Mattermost is an open-source, self-hosted messaging and collaboration platform used in security operations, incident response, and regulated industries. CVEs here cover authentication, authorization, and data-handling flaws in the server, client, and integrated plugins.

1 CVEs1 articlesRSS

CVEs

CVE-2026-14344

[ MEDIUM ]CVSS 4.3EPSS 0.2%patched

Mattermost Boards Board-Creation Permission Not Enforced

Mattermost through 11.9.0 fails to enforce board-creation permissions, letting any authenticated user create boards regardless of their role.

Mattermost / Mattermost (Boards)Sep 17

Articles

~/articles/2026-09-17-mattermost-cve-2026-14344-board-auth-bypass

mattermost

Mattermost CVE-2026-14344: Board Permission Check Skipped

CVE-2026-14344 lets any authenticated Mattermost user create boards regardless of role assignments. Four active release branches affected; upgrade per the security advisory.

Sep 17read →