Threats affecting pkg:github/zackriya-solutions/meetily

CVE-2026-127286 is a medium-severity vulnerability in Zackriya-Solutions Meetily versions 0.4.0 and 0.4.1. It involves missing authentication in a function within backend/app/main.py, allowing remote attackers to exploit the flaw without credentials. The vendor is transitioning away from the legacy client-server architecture to a unified application using the Tauri framework, leaving the vulnerable legacy backend code still present. Public exploit code exists, but no confirmed exploitation in the wild has been reported.