Priority HIGH 73
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
nanomq
Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9
Exploited now
nanomq records in CISA KEVNo nanomq vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
33 records in Nanomq · all components
TI-2024-28570 CVE-2024-42655 · GHSA-w7fr-grpr-9jg5
An access control issue in NanoMQ v0.21.10 allows attackers to bypass security…
Priority HIGH 73
An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters.
TI-2026-27853 CVE-2026-36590 · GHSA-2gm5-wc63-c2pc
An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via…
Priority HIGH 72
An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component
Priority HIGH 72
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
TI-2024-20452 CVE-2024-31041 · GHSA-6vvc-wq83-2w8f
Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in…
Priority HIGH 72
Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to cause a denial of service.
TI-2023-17307 CVE-2023-34494 · GHSA-25j6-496g-x28f
NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.
Priority HIGH 72
NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.
TI-2023-16626 CVE-2023-33658 · GHSA-mq6p-f987-q8h3
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
Priority HIGH 72
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
TI-2023-16625 CVE-2023-33657 · GHSA-crqc-c8fj-8qjx
A use-after-free vulnerability exists in NanoMQ 0.17.2.
Priority HIGH 72
A use-after-free vulnerability exists in NanoMQ 0.17.2.
TI-2023-14103 CVE-2023-29996 · GHSA-p6p7-rm34-8cgq
In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of…
Priority HIGH 72
In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode.
TI-2023-14102 CVE-2023-29995 · GHSA-6h45-p2j6-r9ph
In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c
Priority HIGH 72
In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c
TI-2023-14101 CVE-2023-29994 · GHSA-39xg-53hj-p9pw
In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.
Priority HIGH 72
In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.
TI-2023-17306 CVE-2023-34488 · GHSA-fm3v-8h6r-vmxw
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of…
Priority HIGH 70
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.
TI-2026-26855 CVE-2026-34608
nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read
Priority HIGH 69
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
Priority HIGH 68
NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform.
TI-2026-25188 CVE-2026-32696
NULL pointer dereference in nanomq
Priority HIGH 66
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
TI-2026-20729 CVE-2026-25627
nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket
Priority HIGH 66
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
TI-2024-28569 CVE-2024-42651 · GHSA-fx4f-94f8-r3jm
NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the…
Priority HIGH 66
NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component sub_Ctx_handle.
TI-2024-28568 CVE-2024-42650 · GHSA-2w98-h9rr-xfqq
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component…
Priority HIGH 66
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pub_handler.c.
TI-2024-20450 CVE-2024-31036 · GHSA-qx24-6mr9-qph4
A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows…
Priority MEDIUM 63
A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows attackers to cause a denial of service via transmission of crafted hexstreams.
TI-2023-16624 CVE-2023-33656 · GHSA-9479-9c7f-xq65
A memory leak vulnerability exists in NanoMQ 0.17.2.
Priority MEDIUM 58
A memory leak vulnerability exists in NanoMQ 0.17.2.
TI-2024-20451 CVE-2024-31040 · GHSA-p2wx-52q9-6mgg
Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ…
Priority MEDIUM 47
Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a series of specially crafted hexstreams.
TI-2023-16628 CVE-2023-33660 · GHSA-f7qc-364p-36r6
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
Priority MEDIUM 41
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
TI-2023-16627 CVE-2023-33659 · GHSA-mjw2-5qc5-7h27
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
Priority MEDIUM 41
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2.
TI-2024-32266 CVE-2024-48077 · GHSA-4f8h-hq55-xrp6
NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource…
Priority LOW 39
NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling.
TI-2024-29899 CVE-2024-44460 · GHSA-cwr9-w5qw-fr62
An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).
Priority LOW 39
An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).