Low severity3.5NVD Advisory· Published Oct 26, 2026· Updated Oct 26, 2026
CVE-2026-93847
CVE-2026-93847
Description
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=11.7.10
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.