Missing Authentication in Zackriya-Solutions Meetily Affects Backend Functionality
CVE-2026-127286

6.9MEDIUM

Key Information:

Status
Vendor
CVE Published:
13 November 2026

What is CVE-2026-127286?

A vulnerability has been identified in the Zackriya-Solutions Meetily application up to version 0.4.1, specifically within an unknown function in the file backend/app/main.py. This issue can allow unauthorized users to bypass authentication requirements remotely. The legacy client-server architecture has not been fully deprecated, which leaves exploitable code still present in the main application. With the exploit already publicly available, it poses significant risks to existing users as the vendor transitions to a unified application built on the tauri framework.

Affected Version(s)

Meetily 0.4.0

Meetily 0.4.1

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

carfeii (VulDB User)
VulDB CNA Team
.