Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that routes to an external web server. Mattermost Advisory ID: MMSA-2026-00651
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-6517 NTLM Credential Interception in Mattermost Desktop App Versions 6.1 and Below https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6517
Post summary
The post announces a new vulnerability (CVE‑2026‑6517) involving NTLM credential interception in Mattermost Desktop App 6.1 and earlier, but provides no further technical details, PoC, exploit code, or mitigation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | mattermost_desktop | - | - | - |
| App | mattermost | mattermost_desktop | - | - | - |