low3.5
CVE-2026-93847
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenti…
Impact
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Versions 11.7.X | through 11.7.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.