LOWCVSS v3.1 3.5Vulnerability
CVE-2026-93847
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732
Properties
- Severity
- LOW
- Nvd fetched at
- 2026-10-26T19:15:24.996242+00:00
- Cvss severity
- LOW
- Cvss score
- 3.5
- Retrieved at
- 2026-10-26T19:17:44+00:00
- Score
- 3.5
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-93847
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- First seen by Signal
- 2026-10-26T19:10:44+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- Published at
- 2026-10-26T15:16:46.117
- Last modified
- 2026-10-26T16:50:49.857
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph