CompaniesMattermostMonthly reportsApril 2026
Mattermost in April 2026: incidents, uptime and changes
0incidents posted
0labelled major or critical
100%free of major/critical
100%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 0 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
Incidents 0
Mattermost posted no incidents in April 2026.
CVEs published
- CVE-2026-25773 Focalboard Second-Order SQL Injection in category reorder endpoint allows data exfiltration (unsupported product, no fix) (CVSS 8.1)
- CVE-2026-28736 Focalboard IDOR in file content endpoint allows cross-user file access (unsupported product, no fix) (CVSS 4.3)
- CVE-2026-3524 Authorization Bypass in Mattermost Legal Hold Plugin Due to Missing Return After Permission Check (CVSS 8.3)
- CVE-2026-21388 Unbounded Request Body Read in MS Teams Plugin {{/lifecycle}} Webhook Endpoint (CVSS 3.7)
- CVE-2026-24661 Unbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook Endpoint (CVSS 3.7)
- CVE-2026-27769 Connected Workspaces: Malicious remote server can manipulate arbitrary user's status (CVSS 2.7)
- CVE-2026-28741 CSRF Protection Bypass Allows Updating a User's Authentication Method (CVSS 6.8)
- CVE-2026-3590 Race Condition in Guest Magic Link Authentication Allows Token Reuse (CVSS 6.5)
Cite this
Mattermost posted 0 status incidents in April 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Mattermost in April 2026
- Vendor
- Mattermost
- Date
- URL
- https://rewindex.com/company/mattermost/2026/04