https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:07:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250096 EUVD-2026-250096 https://cve.radiocsirt.org/vuln/euvd-2026-250096 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55293 <p>Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a new key. First sending a empty key bypasses &#39;if (p.public_key.size &gt; 0) {&#39;, clearing the existing publicKey (and resetting the size to 0) for a known node. Then a new key bypasses &#39;if (info-&gt;user.public_key.size &gt; 0) {&#39;, and this malicious key is stored in NodeDB. This vulnerability is fixed in 2.6.3.</p> <p>Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a new key. First sending a empty key bypasses &#39;if (p.public_key.size &gt; 0) {&#39;, clearing the existing publicKey (and resetting the size to 0) for a known node. Then a new key bypasses &#39;if (info-&gt;user.public_key.size &gt; 0) {&#39;, and this malicious key is stored in NodeDB. This vulnerability is fixed in 2.6.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-55293