Vulnerabilities

TI-2026-51876 CVE-2026-73863

NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing

MEDIUM 64

NanoMQ is an MQTT broker.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00353 Published 2026-09-18 Fixed in 0.24.14 CWE-125

TI-2026-44141 CVE-2026-61633

NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoS

MEDIUM 44

NanoMQ is an MQTT broker.

CVSS 3.1LOW 2.0 Network High privileges User interaction EPSS 0.00338 Published 2026-09-18 Fixed in 0.24.14 CWE-835

TI-2026-32539 CVE-2026-44639

NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing

MEDIUM 51

NanoMQ is an MQTT broker.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00443 Published 2026-09-18 Fixed in 0.24.14 CWE-407

TI-2026-32612 CVE-2026-44725

EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution

LOW 31

EMQX is a scalable and reliable MQTT broker for AI, IoT, IIoT, and connected vehicles.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00372 Published 2026-08-20 Fixed in 5.8.11, 5.9.3 +4 CWE-345

TI-2026-34856 CVE-2026-47276

NULL Pointer Dereference in REST API properties_parse via Malformed user_properties

MEDIUM 62

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker to crash the NanoMQ broker by sending a POST request to `/api/v4/mqtt/publish` with `user_proper…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00411 Published 2026-07-20 No fix listed CWE-476

TI-2026-34855 CVE-2026-47275

nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS

MEDIUM 46

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client (including bridge mode) with a single pa…

CVSS 3.1LOW 2.6 Network Low privileges User interaction EPSS 0.00273 Published 2026-07-20 No fix listed CWE-476

TI-2026-27370 CVE-2026-35217

NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read

MEDIUM 62

NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SUBSCRIBE` handling: if a subscription entry is missing the final 1-byte `Subscription Options` field, the broker may still accept the malformed packet and instal…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0032 Published 2026-07-20 No fix listed CWE-125

TI-2026-27853 CVE-2026-36590 · GHSA-2gm5-wc63-c2pc

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via…

HIGH 72

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00588 Published 2026-07-15 No fix listed CWE-400

TI-2026-32979 CVE-2026-45151

NanoMQ: NULL Pointer Dereference

MEDIUM 48

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 4.0LOW 2.9 Network No auth No interaction EPSS 0.00227 Published 2026-05-29 No fix listed CWE-476

TI-2026-32540 CVE-2026-44640

NanoMQ: QUIC Dialer Close Type Confusion

MEDIUM 54

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1MEDIUM 4.5 Local No auth User interaction EPSS 0.00096 Published 2026-05-29 Fixed in 0.24.14 CWE-843

TI-2026-24671 CVE-2026-32134

NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore

MEDIUM 60

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00401 Published 2026-05-19 Fixed in 0.24.11 CWE-476

TI-2026-07683 CVE-2026-8741 · GHSA-48p2-hcwr-rx4q

EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition

MEDIUM 45

A vulnerability has been found in EMQX up to 6.2.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00282 Published 2026-05-17 No fix listed CWE-362

TI-2026-24672 CVE-2026-32135

NanoMQ has Heap Buffer Overflow in URI Parameter Parsing

HIGH 73

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00502 Published 2026-04-20 Fixed in 0.24.11 CWE-122

TI-2026-26855 CVE-2026-34608

nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read

HIGH 69

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00373 Published 2026-04-02 Fixed in 0.24.10 CWE-125

TI-2026-23696 CVE-2026-30867 · GHSA-r3fr-7m74-q7g2

CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing

LOW 29

CocoaMQTT is a MQTT 5.0 client library for iOS and macOS written in Swift.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00331 Published 2026-04-02 Fixed in 2.2.2 CWE-617

TI-2026-25188 CVE-2026-32696

NULL pointer dereference in nanomq

HIGH 66

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-03-30 Fixed in 0.24.7 CWE-476

TI-2026-20729 CVE-2026-25627

nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket

HIGH 66

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2026-03-30 Fixed in 0.24.8 CWE-125

TI-2026-17589 CVE-2026-21888

MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer()

HIGH 72

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00351 Published 2026-03-11 No fix listed CWE-125

TI-2026-17734 CVE-2026-22040

NanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crash

LOW 24

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00264 Published 2026-03-04 No fix listed CWE-416

TI-2025-42170 CVE-2025-68699

NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash

LOW 29

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00322 Published 2026-02-04 No fix listed CWE-476

TI-2024-32266 CVE-2024-48077 · GHSA-4f8h-hq55-xrp6

NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource…

LOW 39

NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00343 Published 2026-01-15 No fix listed CWE-400

TI-2025-40549 CVE-2025-66023

NanoMQ has Use-After-Free of malformed bridging message

LOW 31

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00369 Published 2026-01-01 Fixed in 0.24.5 CWE-416

TI-2025-37334 CVE-2025-59946

NanoMQ has a Use After Free vulnerability via sub info list

HIGH 68

NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00376 Published 2025-12-27 Fixed in 0.24.4 CWE-416

TI-2025-37335 CVE-2025-59947

NanoMQ has Buffer Overflow

LOW 37

NanoMQ is a messaging broker/bus for IoT Edge & SDV.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00326 Published 2025-12-15 Fixed in 0.24.4 CWE-120

TI-2025-40521 CVE-2025-65953

NanoMQ UAF of retain message due to invalid MQTTV5 properties

LOW 26

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00236 Published 2025-11-25 Fixed in 0.22.5 CWE-416

Vulnerabilities

Filters