CVE-2026-7387 | Mattermost up to 11.6.x Crafted API authorization

June 12, 2026 Yanac

A vulnerability was found in Mattermost up to 10.11.15/10.11.16/11.5.4/11.6.1/11.6.x and classified as critical. This impacts an unknown function of the component Crafted API. Executing a manipulation can lead to incorrect authorization.

The identification of this vulnerability is CVE-2026-7387. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More