CVE-2026-4053

The record

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints.. Mattermost Advisory ID: MMSA-2026-00631

Affected packages

Related vulnerabilities

• CVE-2026-98124 In the Linux kernel, the following vulnerability has been resolved: smb/client… CWE-672
• CVE-2026-98080 In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force… CWE-672
• CVE-2026-55250 Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0… CWE-672
• CVE-2026-53637 Sylius is an Open Source eCommerce Framework on Symfony. CWE-672
• CVE-2026-61699 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-672
• CVE-2026-85044 Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82… CWE-672
• CVE-2026-19538 The BLOCKED access control list items that are evaluated to deny access on the the proxy… CWE-672
• CVE-2026-79010 Operation on a resource after expiration or release in Network in Google Chrome prior to… CWE-672