UpHeron
All vulnerabilities

Servers and applications

CVE-2025-55070

Mattermost versions <11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events

Severity
High 7.5
Published
14 Nov 2025
Last changed
19 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
11.0.0
Sources
NVD

Affected software

SoftwareAffected versions
MattermostServers and applications · cpe:a:mattermost:mattermost_server
  • Every version before 11.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-55070
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-55070