MO
Product
moquette
9
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 0Low 0
Watch
Add moquette to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85724 | 9.6 | Sep 23 | Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass Affected: < 0.18.1 |
| CVE-2026-95848 | 9.1 | Sep 23 | Moquette fails open when configured authentication or authorization classes cannot load Affected: < 0.18.1 |
| CVE-2026-95847 | 7.5 | Sep 23 | Moquette client IDs can cause cross-session H2 durable-queue corruption Affected: < 0.18.1 |
| CVE-2026-95846 | 7.5 | Sep 23 | Moquette publishes Last-Will messages without enforcing write authorization Affected: < 0.18.1 |
| CVE-2026-95845 | 7.5 | Sep 23 | Moquette unbounded per-session message queues allow memory exhaustion Affected: < 0.18.1 |
| CVE-2026-95844 | 7.5 | Sep 23 | Moquette deeply nested MQTT topics can cause stack exhaustion Affected: < 0.18.1 |
| CVE-2026-95843 | 7.5 | Sep 23 | Moquette malformed shared subscriptions can crash command processing Affected: < 0.18.1 |
| CVE-2026-95842 | 7.5 | Sep 23 | Moquette uncaught MQTT command exceptions can terminate shared session event loops Affected: < 0.18.1 |
| CVE-2026-85058 | 7.5 | Sep 18 | Moquette: Missing Authorization in io.moquette:moquette-broker Affected: < 0.18.1 |
Showing 9