VendorsMattermostfocalboardall versions
Vulnerabilities

Mattermost Focalboard

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-25773
Focalboard Second-Order SQL Injection in category reorder endpoint allows data exfiltration (unsupported product, no fix)
Published 2026-04-03 · Analyzed
8.1EPSS 0.003
CVE-2026-28736
Focalboard IDOR in file content endpoint allows cross-user file access (unsupported product, no fix)
Published 2026-04-03 · Analyzed
4.3EPSS 0.002