SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-9602

MEDIUM · CVSS 6.5 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The Mattermost Desktop App versions up to 6.2 are vulnerable due to inadequate validation of payloads received from the Mattermost Web App, allowing attackers to crash the application by sending malformed payloads. This vulnerability poses a risk primarily to organizations using these specific versions of the Mattermost Desktop App, particularly those with untrusted server environments. Users and administrators should prioritize updating to the latest version to mitigate the risk of service disruption.

CVE
CVE-2026-9602
Severity
MEDIUM
CVSS
6.5
EPSS
0.24%

Original NVD Description

Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00678

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-9693 LOW CVE-2026-75587 LOW CVE-2026-9859 MEDIUM CVE-2026-9816 HIGH CVE-2026-10080 MEDIUM CVE-2026-16048 MEDIUM