# Mattermost in November 2025: incidents, uptime and changes

> Mattermost in November 2025: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 11 CVEs. From Rewindex’s archive of Mattermost’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/mattermost/2025/11
Last updated: 2026-10-19T13:10:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 11
- Previous month: [October 2025](https://rewindex.com/company/mattermost/2025/10.md) · Next: [December 2025](https://rewindex.com/company/mattermost/2025/12.md) · [All months](https://rewindex.com/company/mattermost/reports.md) · [Mattermost](https://rewindex.com/company/mattermost.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2025-11777](https://rewindex.com/cve/CVE-2025-11777.md) Cross-team channel membership access (CVSS 3.1), published 2025-11-13
- [CVE-2025-59480](https://rewindex.com/cve/CVE-2025-59480.md) Inadequate validation of SSO redirect credentials permits credential theft (CVSS 6.1), published 2025-11-13
- [CVE-2025-11776](https://rewindex.com/cve/CVE-2025-11776.md) Guest user can discover archived public channels (CVSS 4.3), published 2025-11-14
- [CVE-2025-41436](https://rewindex.com/cve/CVE-2025-41436.md) Unauthorized access to archived channel content via threads interface (CVSS 3.1), published 2025-11-14
- [CVE-2025-55070](https://rewindex.com/cve/CVE-2025-55070.md) Lack of MFA enforcement in WebSocket connections (CVSS 6.5), published 2025-11-14
- [CVE-2025-55073](https://rewindex.com/cve/CVE-2025-55073.md) MS Teams plugin OAuth allows editing arbitrary posts (CVSS 5.4), published 2025-11-14
- [CVE-2025-11794](https://rewindex.com/cve/CVE-2025-11794.md) Password hash and MFA secret returned in user email verification endpoint (CVSS 4.9), published 2025-11-14
- [CVE-2025-55074](https://rewindex.com/cve/CVE-2025-55074.md) Channel member objects leak read status (CVSS 3.0), published 2025-11-18
- [CVE-2025-12419](https://rewindex.com/cve/CVE-2025-12419.md) Account takeover on OAuth/OpenID-enabled servers (CVSS 9.9), published 2025-11-27
- [CVE-2025-12559](https://rewindex.com/cve/CVE-2025-12559.md) Information Disclosure in Common Teams API (CVSS 4.3), published 2025-11-27
- [CVE-2025-12421](https://rewindex.com/cve/CVE-2025-12421.md) Account Takeover via Code Exchange Endpoint (CVSS 9.9), published 2025-11-27

## Cite this

Mattermost posted 0 status incidents in November 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/mattermost/2025/11
- Citation: Mattermost, “Mattermost in November 2025” (2025-11-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/mattermost/2025/11 (CC BY 4.0).
- Markdown link: `[Mattermost: Mattermost in November 2025 (2025-11-01)](https://rewindex.com/company/mattermost/2025/11)`


---
Canonical: https://rewindex.com/company/mattermost/2025/11 · Markdown: https://rewindex.com/company/mattermost/2025/11.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T14:41:50.148Z