Mattermost is an open-source, self-hosted messaging and collaboration platform used in security operations, incident response, and regulated industries. CVEs here cover authentication, authorization, and data-handling flaws in the server, client, and integrated plugins. Combined article + CVE feed for the Mattermost beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-09-17-mattermost-cve-2026-14344-board-auth-bypass/https://0daynews.com/articles/2026-09-17-mattermost-cve-2026-14344-board-auth-bypass/CVE-2026-14344 lets any authenticated Mattermost user create boards regardless of role assignments. Four active release branches affected; upgrade per the security advisory.Thu, 17 Sep 2026 04:00:00 GMTMattermostarticlehttps://0daynews.com/cve/cve-2026-14344/https://0daynews.com/cve/cve-2026-14344/Mattermost through 11.9.0 fails to enforce board-creation permissions, letting any authenticated user create boards regardless of their role.Wed, 16 Sep 2026 00:00:00 GMTMattermostmediumcve