Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate that an assigned incoming webhook user has access to the target team or channel, which allows a requester with webhook management permissions to create posts or direct messages attributed to another user via crafted incoming webhook configuration and payloads.. Mattermost Advisory ID: MMSA-2026-00683
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Mattermost versions 11․7.x through 11․6.x are vulnerable to CVE-2026-9708, allowing attackers to create posts as another user. https://ift.tt/YA9RExi
Post summary
The post reports that Mattermost versions 11.7.x through 11.6.x are vulnerable to CVE‑2026‑9708, allowing impersonation via post creation. No PoC, exploit, patch, or active exploitation evidence is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | mattermost_server | - | - | - |