794 matches found
CLEANSTART-2026-KA24065 In Mosquitto before 1
Security vulnerability affects the mosquitto package. In Mosquitto before 1...
CLEANSTART-2026-XY41666 In Mosquitto through 1
Security vulnerability affects the mosquitto package. In Mosquitto through 1...
CLEANSTART-2026-BT72999 In Eclipse Mosquitto 1
Security vulnerability affects the mosquitto package. In Eclipse Mosquitto 1...
CLEANSTART-2026-RC67697 In Eclipse Mosquitto 1
Security vulnerability affects the mosquitto package. In Eclipse Mosquitto 1...
CLEANSTART-2026-EK94967 In Eclipse Mosquitto versions 1
Security vulnerability affects the mosquitto package. In Eclipse Mosquitto versions 1...
CLEANSTART-2026-UY47402 When Eclipse Mosquitto version 1
Security vulnerability affects the mosquitto package. When Eclipse Mosquitto version 1...
CLEANSTART-2026-CB00753 When Eclipse Mosquitto version 1
Security vulnerability affects the mosquitto package. When Eclipse Mosquitto version 1...
CLEANSTART-2026-ZH92917 In Eclipse Mosquitto version 1
Security vulnerability affects the mosquitto package. In Eclipse Mosquitto version 1...
CLEANSTART-2026-ER70950 In Eclipse Mosquitto 1
Security vulnerability affects the mosquitto package. In Eclipse Mosquitto 1...
CLEANSTART-2026-HH47904 In Eclipse Mosquitto versions 2
Security vulnerability affects the mosquitto package. In Eclipse Mosquitto versions 2...
CLEANSTART-2026-MA32800 In Eclipse Mosquitto version 2
Security vulnerability affects the mosquitto package. In Eclipse Mosquitto version 2...
CLEANSTART-2026-YE13045 In Mosquitto before 2
Security vulnerability affects the mosquitto package. In Mosquitto before 2...
CLEANSTART-2026-IC77666 In Mosquitto before 2
Security vulnerability affects the mosquitto package. In Mosquitto before 2...
CLEANSTART-2026-KO31247 broker in Eclipse Mosquitto 1
Security vulnerability affects the mosquitto package. The broker in Eclipse Mosquitto 1...
CVE-2026-77056
boneIO blackdebianimages ships with a Mosquitto MQTT broker that uses the same default credentials on all devices. These credentials are publicly documented on github, and there is no indication in the instructions to change them. A remote attacker can use them to gain full read and write access ...
CVE-2026-77060
boneIO blackdebianimages stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd with world-readable permissions. Any local user can read the password hashes for all MQTT accounts and perform offline dictionary attacks. This issue was fixed in version 1.6.0...
EUVD-2026-109955
boneIO blackdebianimages stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd with world-readable permissions. Any local user can read the password hashes for all MQTT accounts and perform offline dictionary attacks. This issue was fixed in version 1.6.0...
CVE-2026-77060
boneIO blackdebianimages stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd with world-readable permissions. Any local user can read the password hashes for all MQTT accounts and perform offline dictionary attacks. This issue was fixed in version 1.6.0...
CVE-2026-77060 Incorrect Permission Assignment for Critical Resource in boneIO
boneIO blackdebianimages stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd with world-readable permissions. Any local user can read the password hashes for all MQTT accounts and perform offline dictionary attacks. This issue was fixed in version 1.6.0...
CVE-2026-77056
boneIO blackdebianimages ships with a Mosquitto MQTT broker that uses the same default credentials on all devices. These credentials are publicly documented on github, and there is no indication in the instructions to change them. A remote attacker can use them to gain full read and write access ...