{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/zackriya-solutions/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zackriya_solutions:meetily:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-127286"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":[],"_cs_products":["Meetily"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Zackriya-Solutions"],"content_html":"\u003cp\u003eA vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1 within the file backend/app/main.py. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. Exploit code is publicly available and might be used. The vendor notes that they are moving towards a single unified application using the tauri framework and have deprecated the client-server architecture of this application.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview the vendor's guidance regarding the deprecated client-server architecture.\u003c/p\u003e\n","date_modified":"2026-11-13T04:58:18Z","date_published":"2026-11-13T04:58:18Z","id":"https://feed.craftedsignal.io/briefs/2026-11-meetily-auth-bypass-cve-2026-127286/","summary":"A vulnerability in Zackriya-Solutions Meetily up to version 0.4.1 in backend/app/main.py leads to missing authentication and can be exploited remotely.","title":"Zackriya-Solutions Meetily: Missing Authentication (CVE-2026-127286)","url":"https://feed.craftedsignal.io/briefs/2026-11-meetily-auth-bypass-cve-2026-127286/"}],"language":"en","title":"CraftedSignal Threat Feed - Zackriya-Solutions","version":"https://jsonfeed.org/version/1.1"}