Priority HIGH 72
An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00588 · Published 2026-07-15 · No fix listed CWE-400
Priority HIGH 73
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00502 · Published 2026-04-20 · Fixed in 0.24.11 CWE-122
Priority HIGH 69
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00373 · Published 2026-04-02 · Fixed in 0.24.10 CWE-125
Priority HIGH 66
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00414 · Published 2026-03-30 · Fixed in 0.24.7 CWE-476
Priority HIGH 66
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2026-03-30 · Fixed in 0.24.8 CWE-125
Priority HIGH 72
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00351 · Published 2026-03-11 · No fix listed CWE-125
Priority LOW 24
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00264 · Published 2026-03-04 · No fix listed CWE-416
Priority LOW 29
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00322 · Published 2026-02-04 · No fix listed CWE-476
Priority LOW 39
NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00343 · Published 2026-01-15 · No fix listed CWE-400
Priority LOW 31
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00369 · Published 2026-01-01 · Fixed in 0.24.5 CWE-416
Priority HIGH 68
NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00376 · Published 2025-12-27 · Fixed in 0.24.4 CWE-416
Priority LOW 37
NanoMQ is a messaging broker/bus for IoT Edge & SDV.
CVSS 4.0HIGH 8.5· Network · Low privileges · User interaction · EPSS 0.00326 · Published 2025-12-15 · Fixed in 0.24.4 CWE-120
Priority HIGH 73
An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00426 · Published 2025-07-29 · No fix listed CWE-284
Priority HIGH 66
NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component sub_Ctx_handle.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00495 · Published 2025-07-29 · No fix listed CWE-400
Priority HIGH 66
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pub_handler.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00648 · Published 2025-07-15 · No fix listed
Priority LOW 29
NanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via a crafted PUBLISH message.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00356 · Published 2025-07-14 · No fix listed CWE-401
Priority LOW 29
NanoMQ v0.22.10 was discovered to contain a heap overflow which allows attackers to cause a Denial of Service (DoS) via a crafted CONNECT message.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00382 · Published 2025-07-14 · No fix listed CWE-122
Priority LOW 39
A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service (DoS) via crafted messages.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0047 · Published 2025-07-14 · No fix listed CWE-125
Priority LOW 39
An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00488 · Published 2024-09-12 · No fix listed CWE-125
Priority MEDIUM 63
A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows attackers to cause a denial of service via transmission of crafted hexstreams.
CVSS 3.1MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.0033 · Published 2024-04-22 · No fix listed CWE-122
Priority HIGH 72
Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to cause a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00556 · Published 2024-04-17 · No fix listed CWE-476
Priority MEDIUM 47
Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a series of specially crafted hexstreams.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00576 · Published 2024-04-17 · No fix listed CWE-120
Priority LOW 30
nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00647 · Published 2024-02-26 · No fix listed CWE-416
Priority HIGH 72
NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00672 · Published 2023-06-12 · No fix listed CWE-416
Priority HIGH 70
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.0051 · Published 2023-06-12 · No fix listed CWE-122
Load more
THREATIST.IORead the docs