Vulnerabilities

TI-2026-63713 CVE-2026-95848

Moquette fails open when configured authentication or authorization classes cannot load

HIGH 81

Moquette is a lightweight Java MQTT broker.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00424 Published 2026-09-23 Fixed in 0.18.1 CWE-636

TI-2026-63712 CVE-2026-95847

HIGH 77

Moquette is a lightweight Java MQTT broker.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00341 Published 2026-09-23 Fixed in 0.18.1 CWE-99

TI-2026-63711 CVE-2026-95846

HIGH 77

Moquette is a lightweight Java MQTT broker.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00319 Published 2026-09-23 Fixed in 0.18.1 CWE-862

TI-2026-63710 CVE-2026-95845

MEDIUM 44

Moquette is a lightweight Java MQTT broker.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00415 Published 2026-09-23 Fixed in 0.18.1 CWE-770

TI-2026-63709 CVE-2026-95844

HIGH 77

Moquette is a lightweight Java MQTT broker.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00423 Published 2026-09-23 Fixed in 0.18.1 CWE-674

TI-2026-63708 CVE-2026-95843

HIGH 77

Moquette is a lightweight Java MQTT broker.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00429 Published 2026-09-23 Fixed in 0.18.1 CWE-20

TI-2026-63707 CVE-2026-95842

HIGH 77

Moquette is a lightweight Java MQTT broker.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2026-09-23 Fixed in 0.18.1 CWE-248

TI-2026-58826 CVE-2026-85724 · GHSA-5f42-97gr-vfhq

HIGH 76

Moquette is a lightweight Java MQTT broker.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-23 Fixed in 0.18.1 CWE-155