CVE-2026-1046
High · 7.6CVSS
7.6
EPSS
0.3%
Published
Feb 16, 2026
CISA due date
—
The record
Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-73335 Android application "Myna Point" is vulnerable to Improper Authorization in Handler for… CWE-939
- CVE-2026-21075 Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3… CWE-939
- CVE-2026-21062 Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local… CWE-939
- CVE-2026-59717 Home Assistant is open source home automation software focused on local control and… CWE-939
- CVE-2026-12189 A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. CWE-939
- CVE-2026-12190 A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. CWE-939
- CVE-2026-53408 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version… CWE-939
- CVE-2026-53407 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version… CWE-939