3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
More on MeshCentral
Other advisories
- Highghsa:GHSA-c7hr-448w-65pxMeshCentral has unsanitized data fields
- Not ratedosv:GHSA-c7hr-448w-65pxMeshCentral has unsanitized data fields
- HighCVE-2026-66420MeshCentral 1.
- Not ratedosv:CVE-2026-66420MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments
- HighCVE-2026-66420MeshCentral 1.
- HighCVE-2024-26135MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
- HighCVE-2024-26135Ylianst MeshCentral: fehlerhafte Herkunftsprüfung
- Not ratedosv:CVE-2024-26135MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
Source: https://thehackernews.com/2026/09/3bb-attacker-used-meshcentral-backdoor.html
ID