CVE-2026-25773 | Mattermost Focalboard up to 8.0 Category Reorder API sql injection

A vulnerability was found in Mattermost Focalboard up to 8.0 and classified as critical. This impacts an unknown function of the component Category Reorder API. Such manipulation leads to sql injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is referenced as CVE-2026-25773. It is possible to launch the attack remotely. No exploit is available.