CVE-2026-8075

EPSS 0.24%
Veröffentlicht 17.07.2026 10:05:06
Zuletzt bearbeitet 30.07.2026 14:44:35
Erkennungen
Login

Posting a malicious markdown image crashes the Mattermost Desktop App

Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermost Advisory ID: MMSA-2026-00668

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mattermost ≫ Mattermost Desktop Version >= 5.5.13 < 5.13.6

Mattermost ≫ Mattermost Desktop Version >= 6.0.2 < 6.2.1

Mattermost ≫ Mattermost Desktop Version > 6.2.1 < 6.3

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.153

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
responsibledisclosure@mattermost.com	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://mattermost.com/security-updates

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-8075

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-8075

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-8075

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-8075