Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-24692 Mattermost Search API Unauthorized Access Vulnerability in Multiple Versions https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24692
Post summary
The text announces CVE-2026-24692 as an unauthorized access flaw in the Mattermost Search API across multiple versions, with no PoC, exploit, or patch information provided.
CVE-2026-24692 Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users… https://www.cve.org/CVERecord?id=CVE-2026-24692
Post summary
The post details CVE‑2026‑24692, outlining affected Mattermost releases and a read‑permission flaw in the search API that allows guest users to access restricted data.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | mattermost_server | - | - | - |