CompaniesMattermostMonthly reportsAugust 2026
Mattermost in August 2026: incidents, uptime and changes
0incidents posted
0labelled major or critical
100%free of major/critical
100%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 0 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
Incidents 0
Mattermost posted no incidents in August 2026.
CVEs published
- CVE-2026-14298 Boards archive import endpoint allows resource exhaustion via zip bomb and file size limit bypass in Mattermost (CVSS 6.5)
- CVE-2026-16048 Channel member roles accept out-of-scope roles (CVSS 6.3)
- CVE-2026-16046 Missing run-state validation on finished playbook runs (CVSS 3.5)
- CVE-2026-16047 Board channel linking without read channel permission validation (CVSS 4.3)
- CVE-2026-16049 _GitLab Plugin allows cross-channel post injection and phishing via missing channel permission checks in issue API endpoints_ (CVSS 3.9)
- CVE-2026-16045 Delegated OAuth tokens could revoke unrelated OAuth application authorizations (CVSS 2.7)
- CVE-2026-16044 Insufficient validation of guest board admin privileges on archive import (CVSS 3.9)
- CVE-2026-15754 Missing per-channel team-scope check in ABAC access control policy unassign allows cross-team policy removal (CVSS 4.2)
- CVE-2026-10527 Boards plugin retains Board Admin rights for users demoted to System Guest (CVSS 6.3)
- CVE-2026-10080 Boards plugin panics on WebSocket command with non-string field types (CVSS 6.5)
- CVE-2026-9816 Insufficient server-side validation of board member role fields permits privilege escalation (CVSS 8.3)
- CVE-2026-9859 Mattermost Boards plugin didn’t enforce role-based authorization on board channel link allowing board editors to expose boards to arbitrary channels (CVSS 6.5)
- CVE-2026-9693 Mattermost thread memberships persist after team removal, exposing private channel thread metadata on re-invite (CVSS 3.5)
- CVE-2026-75587 Plaintext pre-auth secret exposure via Desktop App diagnostics report (CVSS 3.6)
Cite this
Mattermost posted 0 status incidents in August 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Mattermost in August 2026
- Vendor
- Mattermost
- Date
- URL
- https://rewindex.com/company/mattermost/2026/08