TI-2025-34949 CVE-2025-55293
Meshtastic allows crafting of specific NodeInfo packets that overwrite any publicKey saved in the NodeDB
Priority HIGH 81
Meshtastic is an open source mesh networking solution.
meshtastic
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
meshtastic records in CISA KEVNo meshtastic vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records in Meshtastic Firmware · all components
Priority HIGH 75
Meshtastic is an open source mesh networking solution.
TI-2024-34421 CVE-2024-51500
Failure to check for packets from the broadcast address allows potential DDoS…
Priority HIGH 72
Meshtastic firmware is a device firmware for the Meshtastic project.
Priority HIGH 68
Meshtastic is an open source mesh networking solution.
Priority MEDIUM 62
Meshtastic is an open source mesh networking solution.
TI-2025-33554 CVE-2025-53627
Meshtastic firmware allows forged DMs with no PKC to show up as encrypted
Priority MEDIUM 57
Meshtastic is an open source mesh networking solution.
TI-2024-31447 CVE-2024-47065
Traceroute_APP responses are not rate-limited.
Priority MEDIUM 53
Meshtastic is an open source mesh networking solution.
TI-2025-18514 CVE-2025-24797
Meshtastic incorrectly hands malformed packets leads to controlled buffer overflow
Priority MEDIUM 51
Meshtastic is an open source mesh networking solution.
Priority MEDIUM 43
Meshtastic is an open source, off-grid, decentralized, mesh network.
TI-2025-32592 CVE-2025-52464
Meshtastic Repeated Public and Private Keypairs
Priority MEDIUM 42
Meshtastic is an open source mesh networking solution.
TI-2024-30150 CVE-2024-45038
Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware
Priority MEDIUM 40
Meshtastic device firmware is a firmware for meshtastic devices to run an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices.
TI-2026-30846 CVE-2026-42566
Meshtastic: Malformed UTF-8 in User.long_name broadcast over LoRa causes mesh-wide client decode failure
Priority LOW 39
Meshtastic is an open source mesh networking solution.
TI-2025-15568 CVE-2025-21608
Forged packets over MQTT can show up in direct messages in Meshtastic firmware
Priority LOW 30
Meshtastic is an open source mesh networking solution.
TI-2024-31461 CVE-2024-47079
Unauthorized usage of remote hardware module because of missing channel verification
Priority LOW 28
Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices.