| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 11.7.0, < 11.7.11 | 11.7.11 |
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free