# Mattermost in February 2026: incidents, uptime and changes

> Mattermost in February 2026: 1 incident on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 10 CVEs. From Rewindex’s archive of Mattermost’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/mattermost/2026/02
Last updated: 2026-10-15T13:32:28Z

- Incidents posted: 1 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none 1
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 10
- Previous month: [January 2026](https://rewindex.com/company/mattermost/2026/01.md) · Next: [March 2026](https://rewindex.com/company/mattermost/2026/03.md) · [All months](https://rewindex.com/company/mattermost/reports.md) · [Mattermost](https://rewindex.com/company/mattermost.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [\[Service Disruption\] Android Push Notifications Unavailable](https://rewindex.com/company/mattermost/incidents/cs17jvcnp399.md) | none | 2026-02-26 20:47 UTC | 2026-02-27 18:26 UTC | 22 h | resolved |

## CVEs published

- [CVE-2025-13523](https://rewindex.com/cve/CVE-2025-13523.md) Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow (CVSS 7.7), published 2026-02-06
- [CVE-2026-22892](https://rewindex.com/cve/CVE-2026-22892.md) Insufficient Authorization in Mattermost Jira Plugin Allows Unauthorized Access to Post Attachments (CVSS 4.3), published 2026-02-13
- [CVE-2026-20796](https://rewindex.com/cve/CVE-2026-20796.md) Time-of-check time-of-use vulnerability in common teams API (CVSS 3.1), published 2026-02-13
- [CVE-2026-0999](https://rewindex.com/cve/CVE-2026-0999.md) Authentication bypass via userID login when email and username login are disabled (CVSS 5.4), published 2026-02-16
- [CVE-2026-0998](https://rewindex.com/cve/CVE-2026-0998.md) Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls (CVSS 4.3), published 2026-02-16
- [CVE-2026-0997](https://rewindex.com/cve/CVE-2026-0997.md) Mattermost Zoom Plugin channel preference API lacks authorization checks (CVSS 4.3), published 2026-02-16
- [CVE-2025-13821](https://rewindex.com/cve/CVE-2025-13821.md) User profile update exposes password hash and MFA secrets (CVSS 5.7), published 2026-02-16
- [CVE-2025-14350](https://rewindex.com/cve/CVE-2025-14350.md) Information disclosure via channel mentions in posts (CVSS 4.3), published 2026-02-16
- [CVE-2026-1046](https://rewindex.com/cve/CVE-2026-1046.md) Arbitrary application execution via unvalidated server-controlled URLs in Help menu (CVSS 7.6), published 2026-02-16
- [CVE-2025-14573](https://rewindex.com/cve/CVE-2025-14573.md) Team Admin Bypass of Invite Permissions via allow\_open\_invite Field (CVSS 3.8), published 2026-02-16

## Cite this

Mattermost posted 1 status incident in February 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/mattermost/2026/02
- Citation: Mattermost, “Mattermost in February 2026” (2026-02-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/mattermost/2026/02 (CC BY 4.0).
- Markdown link: `[Mattermost: Mattermost in February 2026 (2026-02-01)](https://rewindex.com/company/mattermost/2026/02)`


---
Canonical: https://rewindex.com/company/mattermost/2026/02 · Markdown: https://rewindex.com/company/mattermost/2026/02.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T21:52:12.170Z