THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-14298 (MEDIUM 6.5) — Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion o

[NVD] CVE-2026-14298 (MEDIUM 6.5) — Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion o

lownvdPublished 2026-08-13

CVE-2026-14298 CVSS: 6.5 MEDIUM Published: 2026-08-13T09:17:11.860

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk consumption via a crafted .boardarc

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-14298