Vulnerabilities

TI-2024-17226 CVE-2024-26135 · GHSA-cp68-qrhr-g9h8

MeshCentral cross-site websocket hijacking (CSWSH) vulnerability

MEDIUM 40

MeshCentral is a full computer management web site.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2024-02-20 Fixed in 1.1.21 CWE-346

TI-2023-28440 CVE-2023-51838 · GHSA-v269-rrr6-cx6r

LOW 33

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00525 Published 2024-02-02 No fix listed CWE-327

TI-2023-28439 CVE-2023-51837 · GHSA-8xw6-9h78-c89j

MEDIUM 49

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00467 Published 2024-01-30 No fix listed CWE-295

TI-2023-28443 CVE-2023-51842 · GHSA-wpxw-5xfm-x22v

MEDIUM 40

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00835 Published 2024-01-29 Fixed in 1.1.17