Priority HIGH 73
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
nanomq
Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9
Exploited now
nanomq records in CISA KEVNo nanomq vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
53 records
TI-2024-28570 CVE-2024-42655 · GHSA-w7fr-grpr-9jg5
An access control issue in NanoMQ v0.21.10 allows attackers to bypass security…
Priority HIGH 73
An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters.
TI-2026-27853 CVE-2026-36590 · GHSA-2gm5-wc63-c2pc
An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via…
Priority HIGH 72
An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component
Priority HIGH 72
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
TI-2024-20452 CVE-2024-31041 · GHSA-6vvc-wq83-2w8f
Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in…
Priority HIGH 72
Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to cause a denial of service.
TI-2023-17307 CVE-2023-34494 · GHSA-25j6-496g-x28f
NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.
Priority HIGH 72
NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.
TI-2023-16626 CVE-2023-33658 · GHSA-mq6p-f987-q8h3
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
Priority HIGH 72
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
TI-2023-16625 CVE-2023-33657 · GHSA-crqc-c8fj-8qjx
A use-after-free vulnerability exists in NanoMQ 0.17.2.
Priority HIGH 72
A use-after-free vulnerability exists in NanoMQ 0.17.2.
TI-2023-14103 CVE-2023-29996 · GHSA-p6p7-rm34-8cgq
In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of…
Priority HIGH 72
In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode.
TI-2023-14102 CVE-2023-29995 · GHSA-6h45-p2j6-r9ph
In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c
Priority HIGH 72
In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c
TI-2023-14101 CVE-2023-29994 · GHSA-39xg-53hj-p9pw
In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.
Priority HIGH 72
In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.
TI-2023-17306 CVE-2023-34488 · GHSA-fm3v-8h6r-vmxw
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of…
Priority HIGH 70
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.
TI-2026-26855 CVE-2026-34608
nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read
Priority HIGH 69
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
Priority HIGH 68
NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform.
TI-2026-25188 CVE-2026-32696
NULL pointer dereference in nanomq
Priority HIGH 66
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
TI-2026-20729 CVE-2026-25627
nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket
Priority HIGH 66
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
TI-2024-28569 CVE-2024-42651 · GHSA-fx4f-94f8-r3jm
NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the…
Priority HIGH 66
NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component sub_Ctx_handle.
TI-2024-28568 CVE-2024-42650 · GHSA-2w98-h9rr-xfqq
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component…
Priority HIGH 66
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pub_handler.c.
TI-2026-51876 CVE-2026-73863
NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing
Priority MEDIUM 64
NanoMQ is an MQTT broker.
TI-2024-20450 CVE-2024-31036 · GHSA-qx24-6mr9-qph4
A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows…
Priority MEDIUM 63
A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows attackers to cause a denial of service via transmission of crafted hexstreams.
TI-2026-34856 CVE-2026-47276
NULL Pointer Dereference in REST API properties_parse via Malformed user_properties
Priority MEDIUM 62
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker to crash the NanoMQ broker by sending a POST request to `/api/v4/mqtt/publish` with `user_proper…
TI-2026-27370 CVE-2026-35217
NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read
Priority MEDIUM 62
NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SUBSCRIBE` handling: if a subscription entry is missing the final 1-byte `Subscription Options` field, the broker may still accept the malformed packet and instal…
TI-2023-19269 CVE-2023-37781 · GHSA-rf57-rr5g-mqmp
An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory…
Priority MEDIUM 62
An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.
TI-2026-24671 CVE-2026-32134
NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore
Priority MEDIUM 60
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
TI-2023-16624 CVE-2023-33656 · GHSA-9479-9c7f-xq65
A memory leak vulnerability exists in NanoMQ 0.17.2.
Priority MEDIUM 58
A memory leak vulnerability exists in NanoMQ 0.17.2.