{"id":"EUVD-2026-30756","enisaUuid":"f5bbefed-f6e8-33c4-983c-8592883074ed","description":"Mattermost versions 11.5.x \u003c\u003d 11.5.1, 10.11.x \u003c\u003d 10.11.13, 11.4.x \u003c\u003d 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a user via the use of some of those passwords.. Mattermost Advisory ID: MMSA-2026-00614","datePublished":"May 18, 2026, 8:40:00 AM","dateUpdated":"May 19, 2026, 3:55:27 AM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","references":"https://mattermost.com/security-updates\n","aliases":"CVE-2026-6345\nGHSA-wvgv-4fc3-2rcp\n","assigner":"Mattermost","epss":0.23,"enisaIdProduct":[{"id":"21c05934-68ad-3c0a-a109-a8ce63754930","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.13"},{"id":"549e51fb-63fc-3cac-875b-a6534e2abf10","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.4.0 ≤11.4.3"},{"id":"67679836-7f45-3021-aaa0-8bc2329fca71","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.5.0 ≤11.5.1"}],"enisaIdVendor":[{"id":"0d0d2382-b74a-3bde-9859-b1669f57cc0b","vendor":{"name":"Mattermost"}}],"enisaIdVulnerability":[{"id":"4dc8a7e9-1c71-36c9-a3c2-683ee8cd3f5b","vulnerability":{"id":"GHSA-wvgv-4fc3-2rcp","description":"Mattermost doesn\u0027t prevent disclosure of created user password","datePublished":"May 18, 2026, 9:31:48 AM","dateUpdated":"Jun 1, 2026, 3:34:40 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-6345\nhttps://github.com/mattermost/mattermost/commit/3057ae7e83e9c827ce7818d67c0f3a208f0d9709\nhttps://github.com/mattermost/mattermost\nhttps://mattermost.com/security-updates\n","enisa_id":"EUVD-2026-30756\n","aliases":"CVE-2026-6345\nGHSA-wvgv-4fc3-2rcp\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c165dbc8-ec33-3bf6-b17a-18314150133e","vulnerability":{"id":"CVE-2026-6345","description":"Mattermost versions 11.5.x \u003c\u003d 11.5.1, 10.11.x \u003c\u003d 10.11.13, 11.4.x \u003c\u003d 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a user via the use of some of those passwords.. Mattermost Advisory ID: MMSA-2026-00614","datePublished":"May 18, 2026, 8:40:00 AM","dateUpdated":"May 19, 2026, 3:55:27 AM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","references":"https://mattermost.com/security-updates\n","enisa_id":"EUVD-2026-30756\n","assigner":"Mattermost","epss":0.23,"dataProcessed":"Nov 7, 2026, 7:21:28 AM","vulnerabilityProduct":[{"id":"305952bc-5712-32f4-92b5-d0f4893db632","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.4.0 ≤11.4.3"},{"id":"3d65d712-e4c2-3041-a588-93b6e05cc667","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.5.0 ≤11.5.1"},{"id":"8d0efc10-4430-376b-94d8-5c31a6dcaecc","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.13"}],"vulnerabilityVendor":[{"id":"f3ca8171-2de5-3b39-bc8b-1fbc842b71db","vendor":{"name":"Mattermost"}}]}}],"enisaIdAdvisory":[]}