SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-8075

MEDIUM · CVSS 6.5 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The Mattermost Desktop App versions up to 6.2, 5.5.13, and 6.0.2.0 are vulnerable to a denial-of-service attack due to improper null checks when processing headers, allowing users to crash the app of other channel members by posting a malicious link with a malformed embedded image. Organizations using these versions should prioritize patching to prevent potential disruptions in communication and collaboration. This vulnerability is particularly relevant for teams relying on Mattermost for critical operations.

CVE
CVE-2026-8075
Severity
MEDIUM
CVSS
6.5
EPSS
0.24%

Original NVD Description

Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermost Advisory ID: MMSA-2026-00668

Related CVEs

Other vulnerabilities affecting the same vendor(s)