CVE-2026-26230 — Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members to guest role. Mat — CVE Database · The Intelligence Room