Focalboard (Mattermost) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 121 known versions, newest CVE from 2026-04-03. Vendor: Mattermost.

CVEs of Focalboard

• CVE-2026-28736 - CVSS 4.3 (medium), 2026-04-03: ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded files. This allows an authenticated attacker who…
• CVE-2026-25773 - CVSS 8.1 (high), 2026-04-03: ** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reordering…