{
  "document" : {
    "aggregate_severity" : {
      "text" : "mittel"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Mattermost ist ein webbasierter Instant-Messaging-Dienst.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4009 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4009.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4009 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4009"
    }, {
      "category" : "external",
      "summary" : "Mattermost Security Updates vom 2026-10-15",
      "url" : "https://mattermost.com/security-updates"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102742 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102742"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102743 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102743"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102744 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102744"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102745 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102745"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102746 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102746"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102805 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102805"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102806 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102806"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102807 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102807"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102808 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102808"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102813 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102813"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102747 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102747"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102749 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102749"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102750 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102750"
    }, {
      "category" : "external",
      "summary" : "EU Vulnerability Database EUVD-2026-102751 vom 2026-10-15",
      "url" : "https://euvd.enisa.europa.eu/enisa/EUVD-2026-102751"
    } ],
    "source_lang" : "en-US",
    "title" : "Mattermost: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-15T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-16T11:45:56.430+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-4009",
      "initial_release_date" : "2026-10-15T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-15T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<11.11.0",
          "product" : {
            "name" : "Mattermost Mattermost <11.11.0",
            "product_id" : "T061353"
          }
        }, {
          "category" : "product_version",
          "name" : "11.11.0",
          "product" : {
            "name" : "Mattermost Mattermost 11.11.0",
            "product_id" : "T061353-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mattermost:mattermost_server:11.11.0"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<11.10.1",
          "product" : {
            "name" : "Mattermost Mattermost <11.10.1",
            "product_id" : "T061354"
          }
        }, {
          "category" : "product_version",
          "name" : "11.10.1",
          "product" : {
            "name" : "Mattermost Mattermost 11.10.1",
            "product_id" : "T061354-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mattermost:mattermost_server:11.10.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<11.7.10",
          "product" : {
            "name" : "Mattermost Mattermost <11.7.10",
            "product_id" : "T061355"
          }
        }, {
          "category" : "product_version",
          "name" : "11.7.10",
          "product" : {
            "name" : "Mattermost Mattermost 11.7.10",
            "product_id" : "T061355-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mattermost:mattermost_server:11.7.10"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<11.9.2",
          "product" : {
            "name" : "Mattermost Mattermost <11.9.2",
            "product_id" : "T061356"
          }
        }, {
          "category" : "product_version",
          "name" : "11.9.2",
          "product" : {
            "name" : "Mattermost Mattermost 11.9.2",
            "product_id" : "T061356-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mattermost:mattermost_server:11.9.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<11.8.6",
          "product" : {
            "name" : "Mattermost Mattermost <11.8.6",
            "product_id" : "T061357"
          }
        }, {
          "category" : "product_version",
          "name" : "11.8.6",
          "product" : {
            "name" : "Mattermost Mattermost 11.8.6",
            "product_id" : "T061357-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:mattermost:mattermost_server:11.8.6"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Mattermost"
      } ],
      "category" : "vendor",
      "name" : "Mattermost"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-16251",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-16251"
  }, {
    "cve" : "CVE-2026-16453",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-16453"
  }, {
    "cve" : "CVE-2026-18256",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-18256"
  }, {
    "cve" : "CVE-2026-18551",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-18551"
  }, {
    "cve" : "CVE-2026-18560",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-18560"
  }, {
    "cve" : "CVE-2026-18795",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-18795"
  }, {
    "cve" : "CVE-2026-18799",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-18799"
  }, {
    "cve" : "CVE-2026-19076",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-19076"
  }, {
    "cve" : "CVE-2026-19541",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-19541"
  }, {
    "cve" : "CVE-2026-19600",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-19600"
  }, {
    "cve" : "CVE-2026-19601",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-19601"
  }, {
    "cve" : "CVE-2026-19603",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-19603"
  }, {
    "cve" : "CVE-2026-19621",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-19621"
  }, {
    "cve" : "CVE-2026-19867",
    "product_status" : {
      "known_affected" : [ "T061355", "T061356", "T061357", "T061353", "T061354" ]
    },
    "release_date" : "2026-10-15T22:00:00.000+00:00",
    "title" : "CVE-2026-19867"
  } ]
}