CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

55713 matches found

Cvelist•added 2026/05/11 4:02 p.m.•47 views

CVE-2026-33356 Meari MQTT broker missing per-device subscribe ACL

In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. The broker enforces publish restrictions but does not enforce equivalent subscribe authorization a...

7.7CVSS0.00274EPSS

SaveExploits0References2

CVE•added 2026/05/11 4:02 p.m.•53 views

CVE-2026-33356

CVE-2026-33356 affects Meari IoT Cloud MQTT Broker deployments using EMQX 4.x. The issue is that authenticated low-privilege users can subscribe to global wildcard topics and access telemetry from devices they don’t own, because subscribe authorization is not enforced at per-device scope, while p...

7.7CVSS5.8AI score0.00274EPSS

SaveExploits0References2

Vulnrichment•added 2026/05/11 4:02 p.m.•10 views

CVE-2026-33356 Meari MQTT broker missing per-device subscribe ACL

7.7CVSS5.8AI score0.00274EPSS

SaveExploits0References2

SUSE CVE•added 2026/05/11 2:13 p.m.•14 views

SUSE CVE-2026-43443

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acpcardrt5682init and acpcardrt5682sinit functions did not check the return values of clkget. This could lead to a kernel crash when the invalid pointe...

5.5CVSS5.8AI score0.00107EPSS

SaveExploits0References17

SUSE CVE•added 2026/05/11 2:13 p.m.•18 views

SUSE CVE-2026-43454

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix for duplicate device in netdev hooks When handling NETDEVREGISTER notification, duplicate device registration must be avoided since the device may have been added by nftnetdevhookalloc already when creati...

7.8CVSS5.7AI score0.00119EPSS

SaveExploits0References3