Search
Find a vulnerability
Search criteria
2 vulnerabilities by Zackriya-Solutions
CVE-2026-127286 (GCVE-0-2026-127286)
Vulnerability from nvd – Published: 2026-11-13 02:30 – Updated: 2026-11-13 02:30
VLAI
EPSS
VEX
Title
Zackriya-Solutions Meetily main.py missing authentication
Summary
A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1. Affected is an unknown function of the file backend/app/main.py. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The legacy backend was not removed yet. Vulnerable code is still present on main. The vendor explains: "[W]e are moving towards a single unified application using the tauri framework, and we deprecated the client-server architecture of this application."
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/436458 | vdb-entry |
| https://vuldb.com/vuln/436458/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-127286 | third-party-advisory |
| https://vuldb.com/submit/1041189 | third-party-advisory |
| https://github.com/Zackriya-Solutions/meetily/iss… | issue-tracking |
| https://github.com/Zackriya-Solutions/meetily/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zackriya-Solutions | Meetily |
Affected:
0.4.0
Affected: 0.4.1 cpe:2.3:a:zackriya-solutions:meetily:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:zackriya-solutions:meetily:*:*:*:*:*:*:*:*"
],
"product": "Meetily",
"vendor": "Zackriya-Solutions",
"versions": [
{
"status": "affected",
"version": "0.4.0"
},
{
"status": "affected",
"version": "0.4.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "carfeii (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1. Affected is an unknown function of the file backend/app/main.py. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The legacy backend was not removed yet. Vulnerable code is still present on main. The vendor explains: \"[W]e are moving towards a single unified application using the tauri framework, and we deprecated the client-server architecture of this application.\""
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T02:30:30.754Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-436458 | Zackriya-Solutions Meetily main.py missing authentication",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/436458"
},
{
"name": "VDB-436458 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/436458/cti"
},
{
"name": "CVE-2026-127286 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-127286"
},
{
"name": "Submit #1041189 | https://github.com/Zackriya-Solutions/ meetily 0.4.1 Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1041189"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Zackriya-Solutions/meetily/issues/845"
},
{
"tags": [
"product"
],
"url": "https://github.com/Zackriya-Solutions/meetily/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-12T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-12T18:56:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "Zackriya-Solutions Meetily main.py missing authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-127286",
"datePublished": "2026-11-13T02:30:30.754Z",
"dateReserved": "2026-11-12T17:51:10.701Z",
"dateUpdated": "2026-11-13T02:30:30.754Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-127286 (GCVE-0-2026-127286)
Vulnerability from cvelistv5 – Published: 2026-11-13 02:30 – Updated: 2026-11-13 02:30
VLAI
EPSS
VEX
Title
Zackriya-Solutions Meetily main.py missing authentication
Summary
A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1. Affected is an unknown function of the file backend/app/main.py. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The legacy backend was not removed yet. Vulnerable code is still present on main. The vendor explains: "[W]e are moving towards a single unified application using the tauri framework, and we deprecated the client-server architecture of this application."
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/436458 | vdb-entry |
| https://vuldb.com/vuln/436458/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-127286 | third-party-advisory |
| https://vuldb.com/submit/1041189 | third-party-advisory |
| https://github.com/Zackriya-Solutions/meetily/iss… | issue-tracking |
| https://github.com/Zackriya-Solutions/meetily/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zackriya-Solutions | Meetily |
Affected:
0.4.0
Affected: 0.4.1 cpe:2.3:a:zackriya-solutions:meetily:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:zackriya-solutions:meetily:*:*:*:*:*:*:*:*"
],
"product": "Meetily",
"vendor": "Zackriya-Solutions",
"versions": [
{
"status": "affected",
"version": "0.4.0"
},
{
"status": "affected",
"version": "0.4.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "carfeii (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1. Affected is an unknown function of the file backend/app/main.py. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The legacy backend was not removed yet. Vulnerable code is still present on main. The vendor explains: \"[W]e are moving towards a single unified application using the tauri framework, and we deprecated the client-server architecture of this application.\""
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T02:30:30.754Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-436458 | Zackriya-Solutions Meetily main.py missing authentication",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/436458"
},
{
"name": "VDB-436458 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/436458/cti"
},
{
"name": "CVE-2026-127286 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-127286"
},
{
"name": "Submit #1041189 | https://github.com/Zackriya-Solutions/ meetily 0.4.1 Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1041189"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Zackriya-Solutions/meetily/issues/845"
},
{
"tags": [
"product"
],
"url": "https://github.com/Zackriya-Solutions/meetily/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-12T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-12T18:56:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "Zackriya-Solutions Meetily main.py missing authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-127286",
"datePublished": "2026-11-13T02:30:30.754Z",
"dateReserved": "2026-11-12T17:51:10.701Z",
"dateUpdated": "2026-11-13T02:30:30.754Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}