What’s Vulnerable › Products

Mattermost Focalboard vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Mattermost Focalboard version is affected

Latest Mattermost Focalboard vulnerabilities

• CVE-2026-28736 — Focalboard IDOR in file content endpoint allows cross-user file access (unsupported product, no fix) (CVSS 4.3)
• CVE-2026-25773 — Focalboard Second-Order SQL Injection in category reorder endpoint allows data exfiltration (unsupported product, no fix) (CVSS 6.5)