CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-22880

Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO code exchange flow through the mobile application. Mattermost Advisory ID: MMSA-2025-00564

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 2.0%

CVSS Severity

CVSS v3 Score 6.1

References

https://mattermost.com/security-updates

Products affected by CVE-2026-22880

Mattermost » Mattermost Mobile » Version: N/A

cpe:2.3:a:mattermost:mattermost_mobile:-
Mattermost » Mattermost Mobile » Version: 1.0.1

cpe:2.3:a:mattermost:mattermost_mobile:1.0.1
Mattermost » Mattermost Mobile » Version: 1.0.22

cpe:2.3:a:mattermost:mattermost_mobile:1.0.22
Mattermost » Mattermost Mobile » Version: 1.0.39

cpe:2.3:a:mattermost:mattermost_mobile:1.0.39
Mattermost » Mattermost Mobile » Version: 1.1.0

cpe:2.3:a:mattermost:mattermost_mobile:1.1.0
Mattermost » Mattermost Mobile » Version: 1.10.0

cpe:2.3:a:mattermost:mattermost_mobile:1.10.0
Mattermost » Mattermost Mobile » Version: 1.11.0

cpe:2.3:a:mattermost:mattermost_mobile:1.11.0
Mattermost » Mattermost Mobile » Version: 1.12.0

cpe:2.3:a:mattermost:mattermost_mobile:1.12.0
Mattermost » Mattermost Mobile » Version: 1.13.0

cpe:2.3:a:mattermost:mattermost_mobile:1.13.0
Mattermost » Mattermost Mobile » Version: 1.13.1

cpe:2.3:a:mattermost:mattermost_mobile:1.13.1
Mattermost » Mattermost Mobile » Version: 1.14.0

cpe:2.3:a:mattermost:mattermost_mobile:1.14.0
Mattermost » Mattermost Mobile » Version: 1.15.0

cpe:2.3:a:mattermost:mattermost_mobile:1.15.0
Mattermost » Mattermost Mobile » Version: 1.15.1

cpe:2.3:a:mattermost:mattermost_mobile:1.15.1
Mattermost » Mattermost Mobile » Version: 1.15.2

cpe:2.3:a:mattermost:mattermost_mobile:1.15.2
Mattermost » Mattermost Mobile » Version: 1.16.0

cpe:2.3:a:mattermost:mattermost_mobile:1.16.0
Mattermost » Mattermost Mobile » Version: 1.16.1

cpe:2.3:a:mattermost:mattermost_mobile:1.16.1
Mattermost » Mattermost Mobile » Version: 1.17.0

cpe:2.3:a:mattermost:mattermost_mobile:1.17.0
Mattermost » Mattermost Mobile » Version: 1.18.0

cpe:2.3:a:mattermost:mattermost_mobile:1.18.0
Mattermost » Mattermost Mobile » Version: 1.18.1

cpe:2.3:a:mattermost:mattermost_mobile:1.18.1
Mattermost » Mattermost Mobile » Version: 1.19.0

cpe:2.3:a:mattermost:mattermost_mobile:1.19.0
Mattermost » Mattermost Mobile » Version: 1.2.0

cpe:2.3:a:mattermost:mattermost_mobile:1.2.0
Mattermost » Mattermost Mobile » Version: 1.20.0

cpe:2.3:a:mattermost:mattermost_mobile:1.20.0
Mattermost » Mattermost Mobile » Version: 1.20.2

cpe:2.3:a:mattermost:mattermost_mobile:1.20.2
Mattermost » Mattermost Mobile » Version: 1.21.0

cpe:2.3:a:mattermost:mattermost_mobile:1.21.0
Mattermost » Mattermost Mobile » Version: 1.21.1

cpe:2.3:a:mattermost:mattermost_mobile:1.21.1
Mattermost » Mattermost Mobile » Version: 1.21.2

cpe:2.3:a:mattermost:mattermost_mobile:1.21.2
Mattermost » Mattermost Mobile » Version: 1.22.0

cpe:2.3:a:mattermost:mattermost_mobile:1.22.0
Mattermost » Mattermost Mobile » Version: 1.22.1

cpe:2.3:a:mattermost:mattermost_mobile:1.22.1
Mattermost » Mattermost Mobile » Version: 1.23.0

cpe:2.3:a:mattermost:mattermost_mobile:1.23.0
Mattermost » Mattermost Mobile » Version: 1.23.1

cpe:2.3:a:mattermost:mattermost_mobile:1.23.1
Mattermost » Mattermost Mobile » Version: 1.24.0

cpe:2.3:a:mattermost:mattermost_mobile:1.24.0
Mattermost » Mattermost Mobile » Version: 1.25.0

cpe:2.3:a:mattermost:mattermost_mobile:1.25.0
Mattermost » Mattermost Mobile » Version: 1.25.1

cpe:2.3:a:mattermost:mattermost_mobile:1.25.1
Mattermost » Mattermost Mobile » Version: 1.26.0

cpe:2.3:a:mattermost:mattermost_mobile:1.26.0
Mattermost » Mattermost Mobile » Version: 1.26.1

cpe:2.3:a:mattermost:mattermost_mobile:1.26.1
Mattermost » Mattermost Mobile » Version: 1.26.2

cpe:2.3:a:mattermost:mattermost_mobile:1.26.2
Mattermost » Mattermost Mobile » Version: 1.27.0

cpe:2.3:a:mattermost:mattermost_mobile:1.27.0
Mattermost » Mattermost Mobile » Version: 1.27.1

cpe:2.3:a:mattermost:mattermost_mobile:1.27.1
Mattermost » Mattermost Mobile » Version: 1.28.0

cpe:2.3:a:mattermost:mattermost_mobile:1.28.0
Mattermost » Mattermost Mobile » Version: 1.29.0

cpe:2.3:a:mattermost:mattermost_mobile:1.29.0
Mattermost » Mattermost Mobile » Version: 1.3.0

cpe:2.3:a:mattermost:mattermost_mobile:1.3.0
Mattermost » Mattermost Mobile » Version: 1.30.0

cpe:2.3:a:mattermost:mattermost_mobile:1.30.0
Mattermost » Mattermost Mobile » Version: 1.30.1

cpe:2.3:a:mattermost:mattermost_mobile:1.30.1
Mattermost » Mattermost Mobile » Version: 1.31.0

cpe:2.3:a:mattermost:mattermost_mobile:1.31.0
Mattermost » Mattermost Mobile » Version: 1.31.1

cpe:2.3:a:mattermost:mattermost_mobile:1.31.1
Mattermost » Mattermost Mobile » Version: 1.31.2

cpe:2.3:a:mattermost:mattermost_mobile:1.31.2
Mattermost » Mattermost Mobile » Version: 1.32.0

cpe:2.3:a:mattermost:mattermost_mobile:1.32.0
Mattermost » Mattermost Mobile » Version: 1.32.2

cpe:2.3:a:mattermost:mattermost_mobile:1.32.2
Mattermost » Mattermost Mobile » Version: 1.33.0

cpe:2.3:a:mattermost:mattermost_mobile:1.33.0
Mattermost » Mattermost Mobile » Version: 1.33.1

cpe:2.3:a:mattermost:mattermost_mobile:1.33.1
Mattermost » Mattermost Mobile » Version: 1.34.0

cpe:2.3:a:mattermost:mattermost_mobile:1.34.0
Mattermost » Mattermost Mobile » Version: 1.34.1

cpe:2.3:a:mattermost:mattermost_mobile:1.34.1
Mattermost » Mattermost Mobile » Version: 1.35.0

cpe:2.3:a:mattermost:mattermost_mobile:1.35.0
Mattermost » Mattermost Mobile » Version: 1.35.1

cpe:2.3:a:mattermost:mattermost_mobile:1.35.1
Mattermost » Mattermost Mobile » Version: 1.36.0

cpe:2.3:a:mattermost:mattermost_mobile:1.36.0
Mattermost » Mattermost Mobile » Version: 1.37.0

cpe:2.3:a:mattermost:mattermost_mobile:1.37.0
Mattermost » Mattermost Mobile » Version: 1.38.0

cpe:2.3:a:mattermost:mattermost_mobile:1.38.0
Mattermost » Mattermost Mobile » Version: 1.38.1

cpe:2.3:a:mattermost:mattermost_mobile:1.38.1
Mattermost » Mattermost Mobile » Version: 1.39.0

cpe:2.3:a:mattermost:mattermost_mobile:1.39.0
Mattermost » Mattermost Mobile » Version: 1.4.0

cpe:2.3:a:mattermost:mattermost_mobile:1.4.0
Mattermost » Mattermost Mobile » Version: 1.4.1

cpe:2.3:a:mattermost:mattermost_mobile:1.4.1
Mattermost » Mattermost Mobile » Version: 1.40.0

cpe:2.3:a:mattermost:mattermost_mobile:1.40.0
Mattermost » Mattermost Mobile » Version: 1.41.0

cpe:2.3:a:mattermost:mattermost_mobile:1.41.0
Mattermost » Mattermost Mobile » Version: 1.41.1

cpe:2.3:a:mattermost:mattermost_mobile:1.41.1
Mattermost » Mattermost Mobile » Version: 1.42.0

cpe:2.3:a:mattermost:mattermost_mobile:1.42.0
Mattermost » Mattermost Mobile » Version: 1.42.1

cpe:2.3:a:mattermost:mattermost_mobile:1.42.1
Mattermost » Mattermost Mobile » Version: 1.43.0

cpe:2.3:a:mattermost:mattermost_mobile:1.43.0
Mattermost » Mattermost Mobile » Version: 1.44.0

cpe:2.3:a:mattermost:mattermost_mobile:1.44.0
Mattermost » Mattermost Mobile » Version: 1.44.1

cpe:2.3:a:mattermost:mattermost_mobile:1.44.1
Mattermost » Mattermost Mobile » Version: 1.45.0

cpe:2.3:a:mattermost:mattermost_mobile:1.45.0
Mattermost » Mattermost Mobile » Version: 1.45.1

cpe:2.3:a:mattermost:mattermost_mobile:1.45.1
Mattermost » Mattermost Mobile » Version: 1.46.0

cpe:2.3:a:mattermost:mattermost_mobile:1.46.0
Mattermost » Mattermost Mobile » Version: 1.47.2

cpe:2.3:a:mattermost:mattermost_mobile:1.47.2
Mattermost » Mattermost Mobile » Version: 1.48.0

cpe:2.3:a:mattermost:mattermost_mobile:1.48.0
Mattermost » Mattermost Mobile » Version: 1.48.1

cpe:2.3:a:mattermost:mattermost_mobile:1.48.1
Mattermost » Mattermost Mobile » Version: 1.48.2

cpe:2.3:a:mattermost:mattermost_mobile:1.48.2
Mattermost » Mattermost Mobile » Version: 1.49.0

cpe:2.3:a:mattermost:mattermost_mobile:1.49.0
Mattermost » Mattermost Mobile » Version: 1.49.1

cpe:2.3:a:mattermost:mattermost_mobile:1.49.1
Mattermost » Mattermost Mobile » Version: 1.5.0

cpe:2.3:a:mattermost:mattermost_mobile:1.5.0
Mattermost » Mattermost Mobile » Version: 1.5.1

cpe:2.3:a:mattermost:mattermost_mobile:1.5.1
Mattermost » Mattermost Mobile » Version: 1.5.2

cpe:2.3:a:mattermost:mattermost_mobile:1.5.2
Mattermost » Mattermost Mobile » Version: 1.5.3

cpe:2.3:a:mattermost:mattermost_mobile:1.5.3
Mattermost » Mattermost Mobile » Version: 1.50.0

cpe:2.3:a:mattermost:mattermost_mobile:1.50.0
Mattermost » Mattermost Mobile » Version: 1.50.1

cpe:2.3:a:mattermost:mattermost_mobile:1.50.1
Mattermost » Mattermost Mobile » Version: 1.51.0

cpe:2.3:a:mattermost:mattermost_mobile:1.51.0
Mattermost » Mattermost Mobile » Version: 1.51.1

cpe:2.3:a:mattermost:mattermost_mobile:1.51.1
Mattermost » Mattermost Mobile » Version: 1.51.2

cpe:2.3:a:mattermost:mattermost_mobile:1.51.2
Mattermost » Mattermost Mobile » Version: 1.52.0

cpe:2.3:a:mattermost:mattermost_mobile:1.52.0
Mattermost » Mattermost Mobile » Version: 1.53.0

cpe:2.3:a:mattermost:mattermost_mobile:1.53.0
Mattermost » Mattermost Mobile » Version: 1.54.0

cpe:2.3:a:mattermost:mattermost_mobile:1.54.0
Mattermost » Mattermost Mobile » Version: 1.55.0

cpe:2.3:a:mattermost:mattermost_mobile:1.55.0
Mattermost » Mattermost Mobile » Version: 1.55.1

cpe:2.3:a:mattermost:mattermost_mobile:1.55.1
Mattermost » Mattermost Mobile » Version: 1.6.0

cpe:2.3:a:mattermost:mattermost_mobile:1.6.0
Mattermost » Mattermost Mobile » Version: 1.6.1

cpe:2.3:a:mattermost:mattermost_mobile:1.6.1
Mattermost » Mattermost Mobile » Version: 1.7.0

cpe:2.3:a:mattermost:mattermost_mobile:1.7.0
Mattermost » Mattermost Mobile » Version: 1.7.1

cpe:2.3:a:mattermost:mattermost_mobile:1.7.1
Mattermost » Mattermost Mobile » Version: 1.8.0

cpe:2.3:a:mattermost:mattermost_mobile:1.8.0
Mattermost » Mattermost Mobile » Version: 1.9.0

cpe:2.3:a:mattermost:mattermost_mobile:1.9.0
Mattermost » Mattermost Mobile » Version: 1.9.1

cpe:2.3:a:mattermost:mattermost_mobile:1.9.1
Mattermost » Mattermost Mobile » Version: 1.9.2

cpe:2.3:a:mattermost:mattermost_mobile:1.9.2
Mattermost » Mattermost Mobile » Version: 1.9.3

cpe:2.3:a:mattermost:mattermost_mobile:1.9.3
Mattermost » Mattermost Mobile » Version: 2.0.0

cpe:2.3:a:mattermost:mattermost_mobile:2.0.0
Mattermost » Mattermost Mobile » Version: 2.0.1

cpe:2.3:a:mattermost:mattermost_mobile:2.0.1
Mattermost » Mattermost Mobile » Version: 2.1.0

cpe:2.3:a:mattermost:mattermost_mobile:2.1.0
Mattermost » Mattermost Mobile » Version: 2.10.0

cpe:2.3:a:mattermost:mattermost_mobile:2.10.0
Mattermost » Mattermost Mobile » Version: 2.10.1

cpe:2.3:a:mattermost:mattermost_mobile:2.10.1
Mattermost » Mattermost Mobile » Version: 2.11.0

cpe:2.3:a:mattermost:mattermost_mobile:2.11.0
Mattermost » Mattermost Mobile » Version: 2.12.0

cpe:2.3:a:mattermost:mattermost_mobile:2.12.0
Mattermost » Mattermost Mobile » Version: 2.12.1

cpe:2.3:a:mattermost:mattermost_mobile:2.12.1
Mattermost » Mattermost Mobile » Version: 2.12.2

cpe:2.3:a:mattermost:mattermost_mobile:2.12.2
Mattermost » Mattermost Mobile » Version: 2.13.0

cpe:2.3:a:mattermost:mattermost_mobile:2.13.0
Mattermost » Mattermost Mobile » Version: 2.14.0

cpe:2.3:a:mattermost:mattermost_mobile:2.14.0
Mattermost » Mattermost Mobile » Version: 2.15.0

cpe:2.3:a:mattermost:mattermost_mobile:2.15.0
Mattermost » Mattermost Mobile » Version: 2.16.0

cpe:2.3:a:mattermost:mattermost_mobile:2.16.0
Mattermost » Mattermost Mobile » Version: 2.17.0

cpe:2.3:a:mattermost:mattermost_mobile:2.17.0
Mattermost » Mattermost Mobile » Version: 2.17.1

cpe:2.3:a:mattermost:mattermost_mobile:2.17.1
Mattermost » Mattermost Mobile » Version: 2.18.0

cpe:2.3:a:mattermost:mattermost_mobile:2.18.0
Mattermost » Mattermost Mobile » Version: 2.18.1

cpe:2.3:a:mattermost:mattermost_mobile:2.18.1
Mattermost » Mattermost Mobile » Version: 2.19.0

cpe:2.3:a:mattermost:mattermost_mobile:2.19.0
Mattermost » Mattermost Mobile » Version: 2.19.1

cpe:2.3:a:mattermost:mattermost_mobile:2.19.1
Mattermost » Mattermost Mobile » Version: 2.19.2

cpe:2.3:a:mattermost:mattermost_mobile:2.19.2
Mattermost » Mattermost Mobile » Version: 2.2.0

cpe:2.3:a:mattermost:mattermost_mobile:2.2.0
Mattermost » Mattermost Mobile » Version: 2.20.0

cpe:2.3:a:mattermost:mattermost_mobile:2.20.0
Mattermost » Mattermost Mobile » Version: 2.20.1

cpe:2.3:a:mattermost:mattermost_mobile:2.20.1
Mattermost » Mattermost Mobile » Version: 2.21.0

cpe:2.3:a:mattermost:mattermost_mobile:2.21.0
Mattermost » Mattermost Mobile » Version: 2.22.0

cpe:2.3:a:mattermost:mattermost_mobile:2.22.0
Mattermost » Mattermost Mobile » Version: 2.23.0

cpe:2.3:a:mattermost:mattermost_mobile:2.23.0
Mattermost » Mattermost Mobile » Version: 2.23.1

cpe:2.3:a:mattermost:mattermost_mobile:2.23.1
Mattermost » Mattermost Mobile » Version: 2.24.0

cpe:2.3:a:mattermost:mattermost_mobile:2.24.0
Mattermost » Mattermost Mobile » Version: 2.25.0

cpe:2.3:a:mattermost:mattermost_mobile:2.25.0
Mattermost » Mattermost Mobile » Version: 2.25.1

cpe:2.3:a:mattermost:mattermost_mobile:2.25.1
Mattermost » Mattermost Mobile » Version: 2.26.0

cpe:2.3:a:mattermost:mattermost_mobile:2.26.0
Mattermost » Mattermost Mobile » Version: 2.26.1

cpe:2.3:a:mattermost:mattermost_mobile:2.26.1
Mattermost » Mattermost Mobile » Version: 2.26.2

cpe:2.3:a:mattermost:mattermost_mobile:2.26.2
Mattermost » Mattermost Mobile » Version: 2.27.0

cpe:2.3:a:mattermost:mattermost_mobile:2.27.0
Mattermost » Mattermost Mobile » Version: 2.27.1

cpe:2.3:a:mattermost:mattermost_mobile:2.27.1
Mattermost » Mattermost Mobile » Version: 2.28.0

cpe:2.3:a:mattermost:mattermost_mobile:2.28.0
Mattermost » Mattermost Mobile » Version: 2.28.1

cpe:2.3:a:mattermost:mattermost_mobile:2.28.1
Mattermost » Mattermost Mobile » Version: 2.29.0

cpe:2.3:a:mattermost:mattermost_mobile:2.29.0
Mattermost » Mattermost Mobile » Version: 2.29.1

cpe:2.3:a:mattermost:mattermost_mobile:2.29.1
Mattermost » Mattermost Mobile » Version: 2.3.0

cpe:2.3:a:mattermost:mattermost_mobile:2.3.0
Mattermost » Mattermost Mobile » Version: 2.31.0

cpe:2.3:a:mattermost:mattermost_mobile:2.31.0
Mattermost » Mattermost Mobile » Version: 2.32.0

cpe:2.3:a:mattermost:mattermost_mobile:2.32.0
Mattermost » Mattermost Mobile » Version: 2.33.0

cpe:2.3:a:mattermost:mattermost_mobile:2.33.0
Mattermost » Mattermost Mobile » Version: 2.33.1

cpe:2.3:a:mattermost:mattermost_mobile:2.33.1
Mattermost » Mattermost Mobile » Version: 2.34.0

cpe:2.3:a:mattermost:mattermost_mobile:2.34.0
Mattermost » Mattermost Mobile » Version: 2.35.0

cpe:2.3:a:mattermost:mattermost_mobile:2.35.0
Mattermost » Mattermost Mobile » Version: 2.36.0

cpe:2.3:a:mattermost:mattermost_mobile:2.36.0
Mattermost » Mattermost Mobile » Version: 2.36.1

cpe:2.3:a:mattermost:mattermost_mobile:2.36.1
Mattermost » Mattermost Mobile » Version: 2.36.2

cpe:2.3:a:mattermost:mattermost_mobile:2.36.2
Mattermost » Mattermost Mobile » Version: 2.36.4

cpe:2.3:a:mattermost:mattermost_mobile:2.36.4
Mattermost » Mattermost Mobile » Version: 2.37.0

cpe:2.3:a:mattermost:mattermost_mobile:2.37.0
Mattermost » Mattermost Mobile » Version: 2.4.0

cpe:2.3:a:mattermost:mattermost_mobile:2.4.0
Mattermost » Mattermost Mobile » Version: 2.5.0

cpe:2.3:a:mattermost:mattermost_mobile:2.5.0
Mattermost » Mattermost Mobile » Version: 2.5.1

cpe:2.3:a:mattermost:mattermost_mobile:2.5.1
Mattermost » Mattermost Mobile » Version: 2.6.0

cpe:2.3:a:mattermost:mattermost_mobile:2.6.0
Mattermost » Mattermost Mobile » Version: 2.7.0

cpe:2.3:a:mattermost:mattermost_mobile:2.7.0
Mattermost » Mattermost Mobile » Version: 2.8.0

cpe:2.3:a:mattermost:mattermost_mobile:2.8.0
Mattermost » Mattermost Mobile » Version: 2.8.1

cpe:2.3:a:mattermost:mattermost_mobile:2.8.1
Mattermost » Mattermost Mobile » Version: 2.8.2

cpe:2.3:a:mattermost:mattermost_mobile:2.8.2
Mattermost » Mattermost Mobile » Version: 2.9.0

cpe:2.3:a:mattermost:mattermost_mobile:2.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-22880

Products

Pricing

Contact Us