meshery CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH meshery CVE published 2026-07-23

CVE-2026-65919

CVE-2026-65919 is a high-severity vulnerability in Meshery, a popular open-source service mesh management platform. The vulnerability, which has a CVSS score of 8.7, allows unauthenticated attackers to read arbitrary files from the host filesystem by exploiting the /api/system/fileView and /api/system/fileDownload endpoints. These endpoints pass user-supplied file parameters directly to os.Open without pr [truncated]