CVE-2026-3116 — Improper Input Validation in Zoom Plugin Webhook Handler
Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via …
Published: 2026-03-26 · CVSS: 4.9 · CVSS 3.1
Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7