VulnSocial

CVE-2026-65919Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api/system/fileDownload endpoints that pass user-supplied file parameters directly to os.Open without path validation. Attackers can supply absolute paths or traversal sequences in the file parameter to read arbitrary files from the host filesystem without authentication.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-23); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-23: 1Mentions · 2026-08-15: 1Technical Details · 2026-07-23: 1Technical Details · 2026-08-15: 107-2308-15
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-231
Disclosure1
2026-08-151
General1
Full discourse2 posts
  • pdnuclei-bot@pdnuclei_bot
    General

    🚨 CVE-2026-65919 - high 🚨 Meshery <1.0.57 - Arbitrary File Read > Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability i... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-65919 @pdnuclei #NucleiTemplates #cve

    Post summary

    The tweet alerts that Meshery versions prior to 1.0.57 have a high‑severity unauthenticated arbitrary file read vulnerability, linking to a reference page but providing no exploit or patch details.

    00062416
    1.3K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-65919 Unauthenticated Arbitrary File Read in Meshery Before 1.0... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-65919 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    The post announces CVE‑2026‑65919, describing it as an unauthenticated arbitrary file‑read flaw in Meshery before version 1.0, and directs readers to Vulmon for additional information.

    0000087
    4.1K followersView on X

Explore more

Back to dashboard