https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:26:56 +0000 https://cve.radiocsirt.org/vuln/cve-2025-55293 <p><strong>Affected:</strong> meshtastic firmware</p> <p>Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a new key. First sending a empty key bypasses &#39;if (p.public_key.size &gt; 0) {&#39;, clearing the existing publicKey (and resetting the size to 0) for a known node. Then a new key bypasses &#39;if (info-&gt;user.public_key.size &gt; 0) {&#39;, and this malicious key is stored in NodeDB. This vulnerability is fixed in 2.6.3.</p> <p><strong>Affected:</strong> meshtastic firmware</p> <p>Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a new key. First sending a empty key bypasses &#39;if (p.public_key.size &gt; 0) {&#39;, clearing the existing publicKey (and resetting the size to 0) for a known node. Then a new key bypasses &#39;if (info-&gt;user.public_key.size &gt; 0) {&#39;, and this malicious key is stored in NodeDB. This vulnerability is fixed in 2.6.3.</p> https://cve.radiocsirt.org/vuln/cve-2025-55293