{"api_version":"v1","generated_at":"2026-10-08T11:40:00+00:00","product":{"cve_count":15,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-meshtastic-firmware-c3370d44150c","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/firmware","name":"firmware","next_cursor":null,"observations":[{"affected":"< 2.7.23.b246bcd","affected_versions_present":true,"cve_id":"CVE-2026-42566","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42566","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-21T14:53:42.856Z","patch_url":"https://github.com/meshtastic/firmware/commit/2cc13a1132d94b66a9505e7f07ee2d3e83bd0c95","primary_source":"","published":"2026-07-19T23:16:04.835Z"},{"affected":"< 2.7.21.1370b23","affected_versions_present":true,"cve_id":"CVE-2026-44359","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44359","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-24T03:56:28.416Z","patch_url":"","primary_source":"","published":"2026-07-19T23:06:32.005Z"},{"affected":"<= 2.6.2","affected_versions_present":true,"cve_id":"CVE-2025-55292","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55292","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-28T15:10:48.709Z","patch_url":"https://github.com/meshtastic/firmware/commit/e5e8683cdba133e726033101586c3235a8678893","primary_source":"","published":"2026-01-27T23:28:28.962Z"},{"affected":"firmware: >= 2.5, < 2.7.15","affected_versions_present":true,"cve_id":"CVE-2025-53627","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53627","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-29T16:52:03.331Z","patch_url":"","primary_source":"","published":"2025-12-29T16:18:29.680Z"},{"affected":"< 2.6.3","affected_versions_present":true,"cve_id":"CVE-2025-55293","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55293","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-18T17:41:25.082Z","patch_url":"https://github.com/meshtastic/firmware/pull/6372","primary_source":"","published":"2025-08-18T17:24:35.254Z"},{"affected":"< 2.5.1","affected_versions_present":true,"cve_id":"CVE-2024-47065","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47065","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-07-11T18:21:44.292Z","patch_url":"","primary_source":"","published":"2025-07-11T17:00:44.221Z"},{"affected":">= 2.5.3, < 2.6.6","affected_versions_present":true,"cve_id":"CVE-2025-53637","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53637","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-07-11T16:50:38.545Z","patch_url":"","primary_source":"","published":"2025-07-10T21:31:44.006Z"},{"affected":">= 1.2.1, < 2.6.2","affected_versions_present":true,"cve_id":"CVE-2025-24798","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-24798","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-07-11T16:51:10.534Z","patch_url":"https://github.com/meshtastic/firmware/commit/dc100e4d3e3dfbf58d3ead8141a49cddb0cbdc19","primary_source":"","published":"2025-07-10T21:22:30.299Z"},{"affected":"> 2.5.0, < 2.6.11","affected_versions_present":true,"cve_id":"CVE-2025-52464","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-52464","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-23T17:39:31.610Z","patch_url":"https://github.com/meshtastic/firmware/security/advisories/GHSA-gq7v-jr8c-mfr7","primary_source":"","published":"2025-06-19T15:10:18.365Z"},{"affected":"< 2.6.2","affected_versions_present":true,"cve_id":"CVE-2025-24797","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-24797","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-21T14:10:47.019Z","patch_url":"","primary_source":"","published":"2025-04-14T23:25:19.152Z"},{"affected":">= 2.5.0, <= 2.5.18","affected_versions_present":true,"cve_id":"CVE-2025-21608","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-21608","fixed":"2.5.19","last_modified":"2025-02-19T15:16:07.151Z","patch_url":"https://github.com/meshtastic/firmware/security/advisories/GHSA-c967-qc39-3hf5","primary_source":"","published":"2025-02-18T18:17:28.752Z"},{"affected":"< 2.5.6","affected_versions_present":true,"cve_id":"CVE-2024-51500","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-51500","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-11-05T16:49:57.752Z","patch_url":"https://github.com/meshtastic/firmware/security/advisories/GHSA-xfmq-5j3j-vgv8","primary_source":"","published":"2024-11-04T23:00:31.876Z"},{"affected":"< 2.5.1","affected_versions_present":true,"cve_id":"CVE-2024-47079","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47079","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-07T20:19:33.259Z","patch_url":"","primary_source":"","published":"2024-10-07T19:55:51.142Z"},{"affected":"< 2.5.1","affected_versions_present":true,"cve_id":"CVE-2024-47078","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47078","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-25T15:43:25.312Z","patch_url":"","primary_source":"","published":"2024-09-25T15:32:37.742Z"},{"affected":"< 2.4.1","affected_versions_present":true,"cve_id":"CVE-2024-45038","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45038","fixed":"2.4.1","last_modified":"2024-08-28T14:00:41.737Z","patch_url":"https://github.com/meshtastic/firmware/security/advisories/GHSA-3x3r-vw9f-pxq5","primary_source":"","published":"2024-08-27T20:36:34.548Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"meshtastic"}}