PatchTheCEVCVEs published by Mattermost, Inc.
CVEs published by Mattermost, Inc. (CVE Numbering Authority). 2 tracked.
- CVE-2026-28736 MEDIUM 4.3 DOWNGRADE ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded
- CVE-2026-13411 MEDIUM 4.3 Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions