https://vulnerability.circl.lu/sightings/feed 2026-07-21T22:50:31.449227+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2e6a2b9d-a4f9-475f-ba21-6e92a3cac08e/export 2026-07-21T22:50:31.474824+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2e6a2b9d-a4f9-475f-ba21-6e92a3cac08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42566", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116951496340599388", "content": "CVE-2026-42566 - DoS in Meshtastic via malformed User.long_name. BLE crash on iOS. CVSS 7.5. Unpatched. Review your mesh setup. #CVE #IoT #infosec\nhttps://www.valtersit.com/cve/CVE-2026-42566/", "creation_timestamp": "2026-07-20T09:03:34.343266Z"} 2026-07-20T09:03:34.343266+00:00 https://vulnerability.circl.lu/sighting/f1ee7430-434e-447d-9754-e42f6b626b40/export 2026-07-21T22:50:31.477114+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f1ee7430-434e-447d-9754-e42f6b626b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42566", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr2wr63oqc2l", "content": "CVE-2026-42566 - DoS in Meshtastic via malformed User.long_name. BLE crash on iOS. CVSS 7.5. Unpatched. Review your mesh setup. #CVE #IoT #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-42566/", "creation_timestamp": "2026-07-20T09:03:33.593806Z"} 2026-07-20T09:03:33.593806+00:00 https://vulnerability.circl.lu/sighting/f44bd7d5-e51c-454d-ae7a-082e74ffaf43/export 2026-07-21T22:50:31.477219+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f44bd7d5-e51c-454d-ae7a-082e74ffaf43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42566", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr2jed6lgt23", "content": "Daily IT Security Digest \u2014 2026-07-20\nCI pipeline. EUVD-2026-45874 scores 7.5 CVE-2026-42566, where a single node advertising a crafted `User.long_name` can poison BLE node databases, causing iOS sync loops and device loss. Users should upgrade to firmware version 2.7.23.b246bcd or later", "creation_timestamp": "2026-07-20T05:03:43.713574Z"} 2026-07-20T05:03:43.713574+00:00 https://vulnerability.circl.lu/sighting/a2f67f50-f47c-4ef4-bf5b-98c8540eb576/export 2026-07-21T22:50:31.477295+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a2f67f50-f47c-4ef4-bf5b-98c8540eb576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42566", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mr2fga6agm2l", "content": "Meshtastic v2.7.23.b246bcd\u672a\u6e80\u3067\u3001iOS\u30a2\u30d7\u30ea\u7d4c\u7531\u306eBLE\u7ba1\u7406\u3067\u3001\u7570\u5e38\u306a\u6587\u5b57\u30b3\u30fc\u30c9\u540d\u306e\u30ce\u30fc\u30c9\u304c\u4ed6\u306e\u7121\u7dda\u6a5f\u3092\u64cd\u4f5c\u4e0d\u80fd\u306b\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-42566 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-20T03:53:12.997704Z"} 2026-07-20T03:53:12.997704+00:00 https://vulnerability.circl.lu/sighting/67f006f9-3013-4d61-a7fc-088140ec36c9/export 2026-07-21T22:50:31.477365+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "67f006f9-3013-4d61-a7fc-088140ec36c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42566", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr26k7m5s423", "content": "CVE-2026-42566 - Meshtastic: Malformed UTF-8 in User.long_name broadcast over LoRa causes mesh-wide client decode failure\nCVE ID : CVE-2026-42566\n \n Published : July 19, 2026, 11:16 p.m. | 56\u00a0minutes ago\n \n Description : Meshtastic is an open source mesh networking solution. P...", "creation_timestamp": "2026-07-20T01:50:10.380594Z"} 2026-07-20T01:50:10.380594+00:00 https://vulnerability.circl.lu/sighting/6adf217a-8f63-483b-912a-18f9089d4ac6/export 2026-07-21T22:50:31.477434+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6adf217a-8f63-483b-912a-18f9089d4ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42566", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr25gzimna2t", "content": "Meshtastic firmware pre-2.7.23.b246bcd: HIGH severity vuln allows malformed User.long_name to break BLE management for iOS, spreading via mesh. Upgrade ASAP to restore control. https://radar.offseq.com/threat/cve-2026-42566-cwe-20-improper-input-validation-in-meshtastic-firmware-f4cb4608f8fc25f1 ...", "creation_timestamp": "2026-07-20T01:30:29.966416Z"} 2026-07-20T01:30:29.966416+00:00 https://vulnerability.circl.lu/sighting/f64f94cf-39fc-4d34-ab4e-0e9dfd0b66bf/export 2026-07-21T22:50:31.477503+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f64f94cf-39fc-4d34-ab4e-0e9dfd0b66bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42566", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116949714689412114", "content": "CVE-2026-42566 (HIGH): Meshtastic firmware <2.7.23.b246bcd suffers from improper input validation. Malformed User.long_name can poison BLE node DBs, causing iOS sync loops and device loss. Upgrade now. Details: https://radar.offseq.com/threat/cve-2026-42566-cwe-20-improper-input-validation-in-meshtastic-firmware-f4cb4608f8fc25f1 #OffSeq #infosec #CVE #IoTSecurity", "creation_timestamp": "2026-07-20T01:30:28.213003Z"} 2026-07-20T01:30:28.213003+00:00 https://vulnerability.circl.lu/sighting/e4182425-fa93-4031-a97a-0014673eafa9/export 2026-07-21T22:50:31.477576+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e4182425-fa93-4031-a97a-0014673eafa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42566", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr23r6goaq2o", "content": "\ud83d\udfe0 CVE-2026-42566 - High (7.5)\n\nMeshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42566/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T01:00:23.508328Z"} 2026-07-20T01:00:23.508328+00:00