CVE-2026-93847
LOW
NVD
CVSS Score
3.5
Severity
LOW
Published
Oct 26, 2026
Vendor
unknown
Description
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732