CVE-2026-14298

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, and 10.11.x <= 10.11.22 fail to properly limit resource consumption when processing certain user-supplied input. This allows an authenticated user to cause a denial of service.

Risk Assessment

An authenticated user can overload the Mattermost server, leading to service unavailability for all users. This can disrupt organizational communication.

Recommendation

Update Mattermost to a version that includes the fix (per advisory MMSA-2026-00713). Monitor resource usage and restrict user privileges.

Original NVD description (English source)

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to properly limit resource consumption when processing certain user-supplied input, which allows an authenticated user to cause a denial of service. Mattermost Advisory ID: MMSA-2026-00713