EUVD-2026-54226

Contiki-NG's MQTT client parsepublishvhdr in os/net/app-layer/mqtt/mqtt.c sets topiclenreceived=1 before checking topiclen against the 64-byte limit, so an over-length topic returns early but leaves the flag set. On the next TCP segment, tcpinput re-invokes the parser with topicreceived==0, and t...

SunGrow WiNet-S 安全漏洞

SunGrow WiNet-S is a LAN communication module from SunGrow, China. A trust management issue vulnerability exists in SunGrow WiNet-S version V200.001.00.P027 and prior versions, which stems from the use of hard-coded MQTT credentials. An attacker could use this vulnerability to send arbitrary...

Ruijie Networks RG-EW300N 安全漏洞

Ruijie Networks RG-EW300N is an intelligent wireless router from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks RG-EW300N version 1.300.1422, which originates from a remote code execution vulnerability via modified MQTT proxy messages...