Meshtastic
Meshtastic Firmware: vulnerabilidades y CVE
Meshtastic Firmware tiene 14 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses3
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-42566 | Alta (7.5) | 0.49% | — | 20 jul 2026 | Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long_name that contains a malformed character encoding can render other radios unusable over BLE… |
| CVE-2025-55292 | Alta (8.2) | 0.15% | — | 28 ene 2026 | Meshtastic is an open source mesh networking solution. In the current Meshtastic architecture, a Node is identified by their NodeID, generated from the MAC address, rather than their public key. This aspect downgrades… |
| CVE-2025-53627 | Media (5.3) | 0.20% | — | 29 dic 2025 | Meshtastic is an open source mesh networking solution. The Meshtastic firmware (starting from version 2.5) introduces asymmetric encryption (PKI) for direct messages, but when the `pki_encrypted` flag is missing, the… |
| CVE-2025-55293 | Crítica (9.8) | 0.42% | — | 18 ago 2025 | Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a new key. First sending a empty key bypasses 'if… |
| CVE-2024-47065 | Baja (2.7) | 0.24% | — | 11 jul 2025 | Meshtastic is an open source mesh networking solution. Prior to 2.5.1, traceroute responses from the remote node are not rate limited. Given that there are SNR measurements attributed to each received transmission, this… |
| CVE-2025-53637 | Alta (8) | 0.36% | — | 10 jul 2025 | Meshtastic is an open source mesh networking solution. The main_matrix.yml GitHub Action is triggered by the pull_request_target event, which has extensive permissions, and can be initiated by an attacker who forked the… |
| CVE-2025-24798 | Media (6.5) | 0.41% | — | 10 jul 2025 | Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true causes a crash. This can lead to a degradation of service for nodes… |
| CVE-2025-52464 | Crítica (9.5) | 0.58% | — | 19 jun 2025 | Meshtastic is an open source mesh networking solution. In versions from 2.5.0 to before 2.6.11, the flashing procedure of several hardware vendors was resulting in duplicated public/private keys. Additionally, the… |
| CVE-2025-24797 | Crítica (9.8) | 0.88% | — | 15 abr 2025 | Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack… |
| CVE-2025-21608 | Media (5.3) | 0.37% | — | 18 feb 2025 | Meshtastic is an open source mesh networking solution. In affected firmware versions crafted packets over MQTT are able to appear as a DM in client to a node even though they were not decoded with PKC. This issue has… |
| CVE-2024-51500 | Alta (7.5) | 0.42% | — | 4 nov 2024 | Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets claiming to be from the special broadcast address (0xFFFFFFFF) which could result in unexpected… |
| CVE-2024-47079 | Media (6.4) | 0.19% | — | 7 oct 2024 | Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote… |
| CVE-2024-47078 | Crítica (9.8) | 0.46% | — | 25 sept 2024 | Meshtastic is an open source, off-grid, decentralized, mesh network. Meshtastic uses MQTT to communicate over an internet connection to a shared or private MQTT Server. Nodes can communicate directly via an internet… |
| CVE-2024-45038 | Alta (7.5) | 0.60% | — | 27 ago 2024 | Meshtastic device firmware is a firmware for meshtastic devices to run an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic device firmware is subject to a… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.