low2.7
CVE-2026-93848
Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint request which allows a System Admin…
Impact
Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint request which allows a System Administrator to determine whether internal addresses and ports are reachable from the server via an unauthenticated login request that triggers the discovery fetch.. Mattermost Advisory ID: MMSA-2026-00774
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Versions 11.7.X | through 11.7.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.