Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-75587 Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a … https://www.cve.org/CVERecord?id=CVE-2026-75587
Post summary
The post discloses that older Mattermost Desktop App versions improperly expose a pre‑authentication secret in diagnostics reports, potentially enabling local attackers.
🚨*CVE* CVE-2026-75587 Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a … https://www.cve.org/CVERecord?id=CVE-2026-75587 ----- Traducción: CVE-2026-75587 Las… https://infoflow.cloud`
Post summary
CVE-2026-75587 details that Mattermost Desktop App versions up to 6.2.2.0 expose pre‑authentication secrets during diagnostics report generation, allowing a local attacker to view them.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | mattermost_desktop | - | - | - |