MO
Vendor
moquette-io
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-95848 | MO moquette moquette-io | 9.1 | Sep 23 | Moquette fails open when configured authentication or authorization classes cannot load |
| CVE-2026-95847 | MO moquette moquette-io | 7.5 | Sep 23 | Moquette client IDs can cause cross-session H2 durable-queue corruption |
| CVE-2026-95846 | MO moquette moquette-io | 7.5 | Sep 23 | Moquette publishes Last-Will messages without enforcing write authorization |
| CVE-2026-95845 | MO moquette moquette-io | 7.5 | Sep 23 | Moquette unbounded per-session message queues allow memory exhaustion |
| CVE-2026-95844 | MO moquette moquette-io | 7.5 | Sep 23 | Moquette deeply nested MQTT topics can cause stack exhaustion |
| CVE-2026-95843 | MO moquette moquette-io | 7.5 | Sep 23 | Moquette malformed shared subscriptions can crash command processing |
| CVE-2026-95842 | MO moquette moquette-io | 7.5 | Sep 23 | Moquette uncaught MQTT command exceptions can terminate shared session event loops |
| CVE-2026-85724 | MO moquette moquette-io | 9.6 | Sep 23 | Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass |
| CVE-2026-85058 | MO moquette moquette-io | 7.5 | Sep 18 | Moquette: Missing Authorization in io.moquette:moquette-broker |