CVE-2026-19600 in Mattermostजानकारी

सारांश

द्वारा MITRE • 16/10/2026

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID: MMSA-2026-00763

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

जिम्मेदार

Mattermost

आरक्षित करना

12/08/2026

प्रकटीकरण

16/10/2026

प्रविष्टि

VDB-421203

EPSS

0.00000

गतिविधियाँ

कम

क्षेत्र

Finance, Education, ...

स्रोत

Do you know our Splunk app?

Download it now for free!