Vendors / Flashmq Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Flashmq records in CISA KEV No Flashmq vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service (DoS).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00587 · Published 2025-07-29 · No fix listed CWE-617
Priority HIGH 72
FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of the publish object is greater than 0.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00587 · Published 2025-07-29 · No fix listed CWE-617
Priority LOW 20
FlashMQ is a MQTT broker/server, designed for multi-CPU environments.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00341 · Published 2025-10-24 · Fixed in 1.23.2 CWE-772
Open these records in search → All records by CVSS severity
0 2 1 0 0
