CVE-2026-2476: Mattermost Ms Teams

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settings via exported configuration data. Mattermost Advisory ID: MMSA-2026-00606

Affected products

• Mattermost Ms Teams: before 2.3.1 (fixed in 2.3.1)

Published 2026-03-16. Last modified 2026-06-17.