Vulnerabilities

TI-2026-07683 CVE-2026-8741 · GHSA-48p2-hcwr-rx4q

EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition

MEDIUM 45

A vulnerability has been found in EMQX up to 6.2.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00282 Published 2026-05-17 No fix listed CWE-362

TI-2023-19269 CVE-2023-37781 · GHSA-rf57-rr5g-mqmp

MEDIUM 62

An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0089 Published 2023-07-17 No fix listed CWE-22

TI-2021-21231 CVE-2021-46434 · GHSA-gg4q-gffx-2ffc

LOW 26

EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00868 Published 2022-03-28 No fix listed