{"uuid": "0f9ff0cd-46ab-4919-a9df-cad4f1652181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44359", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116950564557329063", "content": "CVE-2026-44359 - Critical CI/CD command injection in Meshtastic. CVSS 10. Unpatched. Attacker code executed with repo secrets access via pull_request_target. No approval gate. Disable workflow or restrict PR access immediately. #CVE #infosec #Meshtastic\nhttps://www.valtersit.com/cve/CVE-2026-44359/", "creation_timestamp": "2026-07-20T05:06:36.046217Z"}