CVE-2026-1628 — Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Mattermost app which allows a malicious server to expose preload script functio — CVE Database · The Intelligence Room