https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:48:26.176024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-6850 CVE-2026-6850 — Crafted message attachment causes client-side denial of service via markdown parser regex backtracking in Mattermost 2026-10-07T22:48:26.193855+00:00

Affected: Mattermost

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate the length and content of message attachment field values, which allows an authenticated attacker to cause a denial of service for all users in a channel via a post containing a specially crafted payload that triggers catastrophic backtracking in the client-side markdown parser.. Mattermost Advisory ID: MMSA-2026-00658