HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-3473 — Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11....

·Source: NIST NVD

Updated:

Executive Summary

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.. Mattermost Advisory ID: MMSA-2026-00620

Analysis

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.. Mattermost Advisory ID: MMSA-2026-00620 CVSS Score: 5.9. Published: 2026-05-22T11:16:22.477.

Indicators of Compromise (1)

CVE (1)
CVE-2026-3473
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 22, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Parents Sue Minnesota Hospital to Enforce HIPAA Right of Access for Minor Child’s Medical Records

The parents of a 15-year-old child have filed a lawsuit against a Minnesota hospital for failing to provide them with [&#8230;] The post Parents Sue Minnesota Hospital to Enforce HIPAA Right of Access for Minor Child’s Medical Records appeared first on The HIPAA Journal .

HIPAA Journal
MEDIUMVulnerabilityNEW

Infosecurity Europe: NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persists

NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today

Infosecurity Magazine
MEDIUMVulnerability

XTrasfer and BBVA team i cross-border payments

XTransfer, the world’s leading B2B cross-border trade payment platform, and BBVA, a global financial group, have signed a Memorandum of Understanding (MOU) during Money20/20 Europe 2026 in Amsterdam to deepen cross-border payment infrastructure across Latin America and Europe.

Finextra