661 matches found
CVE-2026-73669
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...
CVE-2026-73669
The CVE describes a vulnerability in Signify Philips Hue Bridge Pro: its Mosquitto MQTT broker (v2.0.22) runs on all interfaces with anonymous access and no firewall restrictions. This allows an attacker on the Bridge’s network to read device data and control connected lights. No remediation deta...
EUVD-2026-58240
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...
PT-2026-71799
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...
ROOT-OS-ALPINE-320-CVE-2024-10525 CVE-2024-10525 in rootio-mosquitto - Patched by Root
Root has patched CVE-2024-10525 in the rootio-mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2024-3935 CVE-2024-3935 in rootio-mosquitto - Patched by Root
Root has patched CVE-2024-3935 in the rootio-mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2024-8376 CVE-2024-8376 in rootio-mosquitto - Patched by Root
Root has patched CVE-2024-8376 in the rootio-mosquitto package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-319-CVE-2024-3935 CVE-2024-3935 in rootio-mosquitto - Patched by Root
Root has patched CVE-2024-3935 in the rootio-mosquitto package for Root:Alpine:3.19. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2024-3935 CVE-2024-3935 in rootio-mosquitto - Patched by Root
Root has patched CVE-2024-3935 in the rootio-mosquitto package for Root:Alpine:3.18. Multiple fixed versions available...
ROOT-OS-ALPINE-318-CVE-2024-10525 CVE-2024-10525 in rootio-mosquitto - Patched by Root
Root has patched CVE-2024-10525 in the rootio-mosquitto package for Root:Alpine:3.18. Multiple fixed versions available...
openSUSE 16 Security Update : mosquitto (openSUSE-SU-2026:20260-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20260-1 advisory. Changes in mosquitto: - update to 2.0.23 boo1258671 Fix handling of disconnected sessions for perlistenersettings true Check return values of...
Security update for mosquitto (critical)
openSUSE security update: security update for mosquitto ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20260-1 Rating: critical References: bsc1232635 bsc1232636 bsc1258671 Cross-References: CVE-2024-10525 CVE-2024-3935 Affected Products: openSUSE...
OPENSUSE-SU-2026:20260-1 Security update for mosquitto
This update for mosquitto fixes the following issues: Changes in mosquitto: - update to 2.0.23 boo1258671 Fix handling of disconnected sessions for perlistenersettings true Check return values of openssl getexdata and setexdata to prevent possible crash. This could occur only in extremely unlikel...
CVE-2019-11778
If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which h...
OSV-2025-989 Bad-cast to UT_hash_bucket' (aka 'struct UT_hash_bucket')password_file__cleanup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=468922225 Crash type: Bad-cast Crash state: Bad-cast to UThashbucket' aka 'struct UThashbucket'passwordfilecleanup mosquittosecuritycleanupdefault brokerfuzzpasswordfile.cpp...
OSV-2025-932 Heap-use-after-free in password_file__cleanup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462551340 Crash type: Heap-use-after-free READ 8 Crash state: passwordfilecleanup mosquittosecuritycleanupdefault brokerfuzzpasswordfile.cpp...
EUVD-2017-18778
Malware in sbrugna...
EUVD-2021-21090
Malware in sbrugna...