📦 Meshcentral

MeshCentral 1.1.16 fails to properly validate SSL certificates when establishing connections, allowing man-in-the-middle attackers to intercept and manipulate communications. This affects all users ru...

This CVE describes a cross-site websocket hijacking vulnerability in MeshCentral's control.ashx endpoint, which handles administrative actions. Attackers can exploit it by tricking users into clicking...

MeshCentral 1.1.16 uses weak cryptographic algorithms that could allow attackers to decrypt sensitive data or bypass authentication. This affects all users running the vulnerable version of MeshCentra...

CVE-2023-51842 is an algorithm-downgrade vulnerability in MeshCentral 1.1.16 that allows attackers to force weaker cryptographic algorithms during connections, potentially compromising security. This ...