Skip to content
OpenAdvisories

Vendor

Ylianst

2 known vulnerabilities.

Products

MeshCentral 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-66420

    MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments

    MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginNam…

    Ylianst MeshCentral
  • High 8.4
    CVE-2024-26135

    MeshCentral cross-site websocket hijacking (CSWSH) vulnerability

    MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within the control.ashx endpoint. This component is the primary mechanism used within MeshCentral to perform administrative act…

    Ylianst MeshCentral meshcentral npm