CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.2. See the original NVD description below for full technical details.
CVE
CVE-2026-3109
Severity
LOW
CVSS
2.2
EPSS
0.29%
Original NVD Description
Mattermost Plugins versions <=11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook requests. Mattermost Advisory ID: MMSA-2026-00584
Related CVEs
Other vulnerabilities affecting the same vendor(s)