CompaniesMattermostMonthly reportsFebruary 2026
Mattermost in February 2026: incidents, uptime and changes
1incidents posted
0labelled major or critical
100%free of major/critical
100%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 0 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: No impact listed 1
Incidents 1
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| [Service Disruption] Android Push Notifications Unavailable | No impact listed | 22 h | resolved | 02-26 |
CVEs published
- CVE-2025-13523 Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow (CVSS 7.7)
- CVE-2026-22892 Insufficient Authorization in Mattermost Jira Plugin Allows Unauthorized Access to Post Attachments (CVSS 4.3)
- CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API (CVSS 3.1)
- CVE-2026-0999 Authentication bypass via userID login when email and username login are disabled (CVSS 5.4)
- CVE-2026-0998 Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls (CVSS 4.3)
- CVE-2026-0997 Mattermost Zoom Plugin channel preference API lacks authorization checks (CVSS 4.3)
- CVE-2025-13821 User profile update exposes password hash and MFA secrets (CVSS 5.7)
- CVE-2025-14350 Information disclosure via channel mentions in posts (CVSS 4.3)
- CVE-2026-1046 Arbitrary application execution via unvalidated server-controlled URLs in Help menu (CVSS 7.6)
- CVE-2025-14573 Team Admin Bypass of Invite Permissions via allow_open_invite Field (CVSS 3.8)
Cite this
Mattermost posted 1 status incident in February 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Mattermost in February 2026
- Vendor
- Mattermost
- Date
- URL
- https://rewindex.com/company/mattermost/2026/02