{"id":"CVE-2026-116516","aliases":[],"cve":{"records":[{"id":"CVE-2026-116516","source":"Mattermost","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-26T13:52:45.402Z","published":"2026-10-26T13:56:57.973Z","modified":"2026-10-26T15:35:50.283Z"}],"publishers":[{"name":"Mattermost","role":"CNA","organizationId":"9302f53e-dde5-4bf3-b2f2-a83f91ac0eee","modified":"2026-10-26T13:56:57.973Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-26T15:35:50.283Z"}],"references":[{"url":"https://mattermost.com/security-updates","tags":["vendor-advisory"],"source":"Mattermost"}],"weaknesses":[{"id":"CWE-754","description":"CWE-754: Improper Check for Unusual or Exceptional Conditions","source":"Mattermost"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-26T14:54:35.705341Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Insufficient length validation when parsing Zoom chat transcriptions","titleSource":"Mattermost","descriptionSource":"Mattermost","description":"Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723","score":6.5,"severity":"medium","published":"2026-10-26T13:56:57.973Z","modified":"2026-10-26T15:35:50.283Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Mattermost","name":"Mattermost","platforms":[],"versions":[{"version":"<=11.9 11.1.9 11.5.8 11.10.7.0","status":"affected","lessThanOrEqual":"<=11.9 11.1.9 11.5.8 11.10.7.0","versionType":"semver"},{"version":"11.10.0","status":"unaffected"},{"version":"11.9.2","status":"unaffected"},{"version":"11.8.6","status":"unaffected"},{"version":"11.7.11","status":"unaffected"}],"defaultStatus":"unaffected","cpes":[],"source":"Mattermost","url":"https://www.cve.org/CVERecord?id=CVE-2026-116516"}],"remediation":[{"text":"Update Mattermost to versions 11.10.0, 11.9.2, 11.8.6, 11.7.11 or higher.","source":"Mattermost","url":"https://www.cve.org/CVERecord?id=CVE-2026-116516"}],"references":["https://mattermost.com/security-updates"],"sources":[{"name":"CVE","id":"CVE-2026-116516","modified":"2026-10-26T15:35:50.283Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116516"}],"assessments":[{"source":"Mattermost","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":6.5}],"sourceAffected":[],"observedAt":"2026-10-29T14:35:11.380Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T11:55:30.958Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}