← Database

CVE-2026-2476

HIGH CVSS: 7.6 Published: 2026-03-16 Modified: 2026-06-17

Description

Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settings via exported configuration data. Mattermost Advisory ID: MMSA-2026-00606

Affected Platforms

Mattermost Ms Teams

Weakness Type

CWE-200, NVD-CWE-noinfo

References