CVE Explorer
CVE-2026-9820
Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sanitize team objects returned by the scheme teams endpoint, which allows a user with the User Manager role to obtain invite links for private teams and use them to join or share access to those teams via the scheme teams API endpoint.. Mattermost Advisory ID: MMSA-2026-00671
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"Mattermost","vendor":"Mattermost","versions":[{"lessThanOrEqual":"11.7.2","status":"affected","version":"11.7.0","versionType":"semver"},{"lessThanOrEqual":"10.11.19","status":"affected","version":"10.11.0","versionType":"semver"},{"status":"unaffected","version":"11.8.0"},{"status":"unaffected","version":"11.7.3"},{"status":"unaffected","version":"10.11.20"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:2c18189411b92f822ecacb8966123392f01f5f118afe9140eff3ce50ef669bd7 · sha256:d3e0c3e51ffefcda… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.8,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:2c18189411b92f822ecacb8966123392f01f5f118afe9140eff3ce50ef669bd7 · sha256:d3e0c3e51ffefcda… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-862","description":"CWE-862: Missing Authorization","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:2c18189411b92f822ecacb8966123392f01f5f118afe9140eff3ce50ef669bd7 · sha256:d3e0c3e51ffefcda… · /containers/cna/problemTypes/0/descriptions/0
Source references
1 source assertion{"name":"MMSA-2026-00671","tags":["vendor-advisory"],"url":"https://mattermost.com/security-updates"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:2c18189411b92f822ecacb8966123392f01f5f118afe9140eff3ce50ef669bd7 · sha256:d3e0c3e51ffefcda… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.