https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:09:15.892029+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-4635 CVE-2026-4635 — Persistent notification timing attack causing server denial of service 2026-09-28T14:09:16.878169+00:00

Affected: Mattermost

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to archive the channel before removing persistent notifications which allows authenticated user to crash the server via timing the creation of persistent notification message between the server deleting existing persistent notifications and archiving the channel.. Mattermost Advisory ID: MMSA-2026-00637