Login Request a demo
MM
Product
Mattermost Mobile
by Mattermost · last CVE May 21, 2026
21
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 0High 7Medium 14Low 0
Severity
All severities21Critical0High7Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mattermost Mobile to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-59480
6.5
0%
Nov 13
Inadequate validation of SSO redirect credentials permits credential theft
Affected: before 2.33.0
CVE-2025-1558
6.5
0%
Mar 24
Denial of Service Via Malicious GIF
Affected: before 2.25.1
CVE-2025-21083
6.5
1%
Jan 15
Insufficient Input Validation on Post Props
Affected: before 2.23.0
CVE-2025-20036
6.5
1%
Jan 15
Insufficient Input Validation on Post Props
Affected: before 2.23.0
CVE-2024-45833
6.5
0%
Sep 16
Mobile password gets saved in dictionary under conditions
Affected: before 2.19.0
CVE-2024-39767
6.5
0%
Jul 15
Spoofed push notifications from malicious server
Affected: before 2.17.0
CVE-2024-3872
6.5
0%
Apr 16
Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker…
Affected: through 2.13.0
CVE-2024-24975
6.5
0%
Mar 15
Denial of Service for mobile app users due to automatic code highlighting
Affected: through 2.12.0
CVE-2026-22880
6.1
0%
May 21
Mobile SSO authentication flow allows credential theft via malicious server
Affected: before 2.37.1
CVE-2024-11358
5.5
0%
Dec 16
Insecure Android File Provider Paths
Affected: before 2.22.2
CVE-2024-32945
5.3
0%
Jul 15
LaTeX post content manipulation via renderer state leak across contexts
Affected: before 2.17.0
CVE-2019-20850
5.3
1%
Jun 19
An issue was discovered in Mattermost Mobile Apps before 1.26.0
Affected: before 1.26.0
CVE-2019-20849
5.3
1%
Jun 19
An issue was discovered in Mattermost Mobile Apps before 1.26.0
Affected: before 1.26.0
CVE-2025-0476
4.3
0%
Jan 15
Mobile crash via file with specially crafted filename
Affected: before 2.23.0
Showing 14