Zackriya-Solutions Meetily: Missing Authentication (CVE-2026-127286)
A vulnerability in Zackriya-Solutions Meetily up to version 0.4.1 in backend/app/main.py leads to missing authentication and can be exploited remotely.
CVE search metadata
CVE search record: CVE-2026-127286. Severity: high. CVSS: 7.3. KEV: no. Product: Meetily. Brief: Zackriya-Solutions Meetily: Missing Authentication (CVE-2026-127286). Brief link: https://feed.craftedsignal.io/briefs/2026-11-meetily-auth-bypass-cve-2026-127286/
Triage facts
Revision 1- Applicability
- Meetily
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 13, 04:58 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1 within the file backend/app/main.py. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. Exploit code is publicly available and might be used. The vendor notes that they are moving towards a single unified application using the tauri framework and have deprecated the client-server architecture of this application.
Recommendation
Review the vendor's guidance regarding the deprecated client-server architecture.