mattermost mattermost desktop
productUScpe:2.3:a:mattermost:mattermost_desktop:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
2critical4high12medium3low
updated 2026-10-28
01
vulnerabilities (34)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2019-20861US | high8.8 | — |
| CVE-2019-20856US | critical9.8 | — |
| CVE-2016-11064US | critical9.8 | — |
| CVE-2020-14455US | medium6.5 | — |
| CVE-2018-21265US | medium5.3 | — |
| CVE-2020-14454US | medium6.1 | — |
| CVE-2023-5876US | medium5.3 | — |
| CVE-2020-14456US | high7.3 | — |
| CVE-2026-9602US | — | — |
| CVE-2026-8075US | — | — |
| CVE-2023-2000US | medium5.4 | — |
| CVE-2023-5875US | medium5.3 | — |
| CVE-2025-55035US | — | — |
| CVE-2024-39772US | medium5.3 | — |
| CVE-2024-37182US | medium6.1 | — |
| CVE-2024-39613US | high7.8 | — |
| CVE-2025-58084US | medium6.5 | — |
| CVE-2026-1046US | medium6.5 | — |
| CVE-2026-75588US | — | — |
| CVE-2024-45835US | medium6.5 | — |
| CVE-2026-8683US | — | — |
| CVE-2024-36287US | low3.3 | — |
| CVE-2026-6517US | high7.7 | — |
| CVE-2023-5920US | low3.3 | — |
| CVE-2026-3471US | — | — |
| CVE-2025-1398US | — | — |
| CVE-2026-4643US | — | — |
| CVE-2026-12284US | — | — |
| CVE-2026-1628US | — | — |
| CVE-2026-75025US | — | — |
| CVE-2023-5339US | medium5.5 | — |
| CVE-2026-75587US | low3.3 | — |
| CVE-2025-13321US | — | — |
| CVE-2025-13326US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-693Protection Mechanism Failure5 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
- CWE-346Origin Validation Error3 CVEs
- CWE-754Improper Check for Unusual or Exceptional Conditions3 CVEs
- CWE-1287Improper Validation of Specified Type of Input2 CVEs
- CWE-400Uncontrolled Resource Consumption2 CVEs
- CWE-427Uncontrolled Search Path Element2 CVEs
- CWE-532Insertion of Sensitive Information into Log File2 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE34 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan