CVE-2026-3109 — Missing timestamp validation in Zoom webhook handler
Mattermost Plugins versions <=11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webho…
Published: 2026-03-26 · CVSS: 2.2 · CVSS 3.1
Mattermost Plugins versions <=11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook requests. Mattermost Advisory ID: MMSA-2026-00584
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7