Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to enforce slash command trigger-word uniqueness during command updates which allows an authenticated team member with Manage Own Slash Commands permission to hijack and impersonate existing system or custom slash commands via editing their own slash command trigger to an already-registered trigger through the command update API. Mattermost Advisory ID: MMSA-2026-00597
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-28732 📊 Severity: 4.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28732 #CVE-2026-28732 #CVE #Medium #CyberSecurity #InfoSec https://t.co/utIS0cREhl
Post summary
Tweet announcing CVE-2026-28732 with a moderate severity score and unspecified product impact, linking to the NVD entry.
CVE-2026-28732 Slash Command Hijacking in Mattermost via Trigger-Word Uniqueness Enforcement Failure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28732
Post summary
The post announces CVE‑2026‑28732, a slash‑command hijacking flaw in Mattermost caused by trigger‑word uniqueness enforcement failure, without providing PoC details, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | mattermost_server | - | - | - |