CVE-2026-86348

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 11.9

Description The MS Calendar plugin fails to recover from handler panics. This allows an authenticated user to crash the plugin process by sending a post-action request containing an unexpected field type.

Recommendations Update to version 11.9 or later.