VulnSocial

CVE-2025-20086General(mattermost / mattermost_server)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mattermost mattermost_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.

mattermost CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-1287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mattermost_server

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
mattermost
Products
mattermost_server

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-05: 1Patch / Workaround · 2026-09-05: 1Technical Details · 2026-09-05: 109-05
Signal classification1 categories
General
1100.0%
Full discourse1 post
  • JTCrawford@JtCrawford
    General

    Cisco found so many IOS XR vulns during internal testing they bundled them into a release instead of individual patches. The real story: their attack surface is so vast even *they* can't track it all. CVE-2025-20086 grants root on Nexus 9K—mitigation only, no fix yet. #NetSec ...

    Post summary

    The post notes Cisco bundled multiple IOS XR vulnerabilities into a release and highlights CVE‐2025‑20086, which allows root on Nexus 9K, but provides only high‑level details without PoC, exploit code, or evidence of active exploitation.

    0000093
    76 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appmattermostmattermost_server---
Appmattermostmattermost_server10.2.0--

Explore more

Back to dashboardmattermost CVEsmattermost_server vulnerabilities