Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows an attacker with access to a support packet to obtain TURN server credentials via the plaintext values present in the exported plugin configuration.. Mattermost Advisory ID: MMSA-2026-00605
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-6347 📊 Severity: 7.6 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-6347 #CVE-2026-6347 #CVE #High #CyberSecurity #InfoSec https://t.co/ttubIECAxB
Post summary
The tweet announces CVE-2026-6347 with a severity score of 7.6, but offers no specifics on the flaw, exploitation, or remediation.
CVE-2026-6347 Information Disclosure in Mattermost Calls Plugin via Unsanitized Support Packet Export https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6347
Post summary
The text announces an information disclosure vulnerability in the Mattermost Calls Plugin related to unsanitized support packet export, without providing PoC, exploit code, active exploitation evidence, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | mattermost_server | - | - | - |