CVE-2026-20796
Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /common_teams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549
Vendor
Product
CWE
Yayın Tarihi
2026-02-13 11:16:10
Güncelleme
2026-02-23 15:53:11
Source Identifier
responsibledisclosure@mattermost.com
KEV Date Added
-