Is CVE-2026-116516 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116516?

CVE-2026-116516 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-116516

Description

Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723