Meshcentral is a remote-access and device-management platform that operates as a single, focused product with deployment across distributed IT environments. Its observed vulnerability surface centers on cryptographic and certificate-handling weaknesses, including improper certificate validation, origin validation errors, and reliance on broken or risky cryptographic algorithms—issues that reflect the authentication and encryption requirements inherent to remote management infrastructure. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Meshcentral over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-51837CRITICAL Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation. | Jan 30, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-26135HIGH MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within the control.ashx endpoint. This component | Feb 20, 2024 | 8.8 | 24 | NO | NO |
CVE-2023-51838HIGH Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm. | Feb 2, 2024 | 7.5 | 21 | NO | NO |
CVE-2023-51842HIGH An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16. | Jan 29, 2024 | 7.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Meshcentral.
Media articles that mention a CVE ID that affects a product developed by Meshcentral — matched by CVE ID, not by vendor name.