agentprime: meshtastic-firmwareEvery new CVE for meshtastic-firmware.https://agentprime.io/CVE-2026-42566: Meshtastic: Malformed UTF-8 in User.long_name broadcast over LoRa causes mesh-wide client decode failurehttps://agentprime.io/advisories/CVE-2026-42566/https://agentprime.io/advisories/CVE-2026-42566/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 19 Jul 2026 23:16:04 GMTCVECVE-2026-44359: Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflowhttps://agentprime.io/advisories/CVE-2026-44359/https://agentprime.io/advisories/CVE-2026-44359/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 19 Jul 2026 23:06:32 GMTCVEcriticalCVE-2025-55292: In Meshtastic, an attacker can spoof licensed amateur flag for a nodehttps://agentprime.io/advisories/CVE-2025-55292/https://agentprime.io/advisories/CVE-2025-55292/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 23:28:28 GMTCVECVE-2025-53627: Meshtastic firmware allows forged DMs with no PKC to show up as encryptedhttps://agentprime.io/advisories/CVE-2025-53627/https://agentprime.io/advisories/CVE-2025-53627/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Dec 2025 16:18:29 GMTCVECVE-2025-55293: Meshtastic allows crafting of specific NodeInfo packets that overwrite any publicKey saved in the NodeDBhttps://agentprime.io/advisories/CVE-2025-55293/https://agentprime.io/advisories/CVE-2025-55293/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Aug 2025 17:24:35 GMTCVEcriticalCVE-2024-47065: Traceroute_APP responses are not rate-limited.https://agentprime.io/advisories/CVE-2024-47065/https://agentprime.io/advisories/CVE-2024-47065/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Jul 2025 17:00:44 GMTCVECVE-2025-53637: Meshtastic allows Command Injection in GitHub Actionhttps://agentprime.io/advisories/CVE-2025-53637/https://agentprime.io/advisories/CVE-2025-53637/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 21:31:44 GMTCVECVE-2025-24798: Meshtastic crashes via an unimplemented routing module replyhttps://agentprime.io/advisories/CVE-2025-24798/https://agentprime.io/advisories/CVE-2025-24798/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 21:22:30 GMTCVECVE-2025-52464: Meshtastic Repeated Public and Private Keypairshttps://agentprime.io/advisories/CVE-2025-52464/https://agentprime.io/advisories/CVE-2025-52464/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jun 2025 15:10:18 GMTCVEcriticalCVE-2025-24797: Meshtastic incorrectly hands malformed packets leads to controlled buffer overflowhttps://agentprime.io/advisories/CVE-2025-24797/https://agentprime.io/advisories/CVE-2025-24797/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 23:25:19 GMTCVEcriticalCVE-2025-21608: Forged packets over MQTT can show up in direct messages in Meshtastic firmwarehttps://agentprime.io/advisories/CVE-2025-21608/https://agentprime.io/advisories/CVE-2025-21608/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Feb 2025 18:17:28 GMTCVECVE-2024-51500: Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmwarehttps://agentprime.io/advisories/CVE-2024-51500/https://agentprime.io/advisories/CVE-2024-51500/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Nov 2024 23:00:31 GMTCVECVE-2024-47079: Unauthorized usage of remote hardware module because of missing channel verificationhttps://agentprime.io/advisories/CVE-2024-47079/https://agentprime.io/advisories/CVE-2024-47079/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Oct 2024 19:55:51 GMTCVECVE-2024-47078: Meshtastic firmware Authentication/Authorization Bypass via MQTThttps://agentprime.io/advisories/CVE-2024-47078/https://agentprime.io/advisories/CVE-2024-47078/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Sep 2024 15:32:37 GMTCVECVE-2024-45038: Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmwarehttps://agentprime.io/advisories/CVE-2024-45038/https://agentprime.io/advisories/CVE-2024-45038/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Aug 2024 20:36:34 GMTCVE