TI-2026-63685 CVE-2026-95699 · GHSA-pjrx-22r5-wchr
MrSteam iSteamX Improper Isolation or Compartmentalization
Priority LOW 36
Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other con…