← Database

CVE-2026-3116

MEDIUM CVSS: 4.9 Published: 2026-03-26 Modified: 2026-06-17

Description

Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-400

References