Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2026-85724

🗓️ 23 Sep 2026 16:29:36Reported by MendType 
mend
 mend🔗 www.mend.io👁 8 Views

Moquette ACL rules substitution allows cross-tenant read and write access.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2026-85724
23 Sep 202617:31
–circl
cve
CVE		CVE-2026-85724
23 Sep 202616:29
–cve
cvelist
Cvelist		CVE-2026-85724 Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass
23 Sep 202616:29
–cvelist
euvd
EUVD		EUVD-2026-85411
23 Sep 202616:29
–euvd
github
Github Security Blog		Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug
23 Sep 202616:11
–github
nvd
NVD		CVE-2026-85724
23 Sep 202617:17
–nvd
osv
OSV		CVE-2026-95842 Moquette uncaught MQTT command exceptions can terminate shared session event loops
23 Sep 202616:29
–osv
osv
OSV		CVE-2026-95844 Moquette deeply nested MQTT topics can cause stack exhaustion
23 Sep 202616:29
–osv
osv
OSV		CVE-2026-95845 Moquette unbounded per-session message queues allow memory exhaustion
23 Sep 202616:29
–osv
osv
OSV		CVE-2026-95846 Moquette publishes Last-Will messages without enforcing write authorization
23 Sep 202616:29
–osv
Rows per page
Vulners
Node
moquettemoquetteRange0.8–0.18.1
SourceLink
githubwww.github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85724.json
githubwww.github.com/moquette-io/moquette/commit/72d6c8257191d2e4b2e3aa11ab25fd09f88c6cb7
githubwww.github.com/moquette-io/moquette/commit/86feb7c31e6fac849c465d8079d08c0e7ef01cdf
githubwww.github.com/moquette-io/moquette/pull/958
githubwww.github.com/moquette-io/moquette/commit/ca17e0be19e86d5e291f4532dfdc94616c8e0049
githubwww.github.com/moquette-io/moquette/commit/affdc71fdba92dc020421678970ae70518fb6da2
githubwww.github.com/moquette-io/moquette/commit/26498631e92d50440b4e3ed42fa546253cc4090c
nvdwww.nvd.nist.gov/vuln/detail/CVE-2026-85724
githubwww.github.com/moquette-io/moquette/releases/tag/v0.18.1
githubwww.github.com/moquette-io/moquette/commit/b4a98bb3f3425ece476ed073aa080c627c1239af
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
08 Oct 2026 00:08Current
6Medium risk
Vulners AI Score6
CVSS 49.3
CVSS 3.19.6
EPSS0.0027
SSVC
CWE-863CWE-155
MoquetteACL rulescross-tenant accessNullPointerExceptionTopic.matchMQTT
8