CVE-2025-24798: Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true causes a…

PriorityP424medium6.5CVSS 3.1

AVAACLPRNUINSUCNINAH

EPSS

0.38%

29.3th percentile

Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true causes a crash. This can lead to a degradation of service for nodes within range of a malicious sender, or via MQTT if downlink is enabled. This vulnerability is fixed in 2.6.2.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
meshtastic	firmware	—	—
meshtastic	meshtastic_firmware	>= 1.2.1 < 2.6.2	2.6.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.