Is CVE-2026-0998 actively exploited?

No active exploitation of CVE-2026-0998 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-0998 be exploited remotely?

Yes. CVE-2026-0998 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-0998?

CVE-2026-0998 has a CVSS score of 4.3 (MEDIUM) and an EPSS exploitation probability of 0.03%.

HOME VULNERABILITIESCVE-2026-0998

MEDIUM

CVE-2026-0998

CWE-862Published: February 16, 2026· Updated: Feb 18, 2026

4.3

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:7.7th

Official Description

Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via direct API calls with manipulated user IDs and post data.. Mattermost Advisory ID: MMSA-2025-00534

NVD Source

Technical Analysis

CVE-2026-0998 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.