Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2026/09/23 4:29 p.m.•46 views

CVE-2026-95847 Moquette client IDs can cause cross-session H2 durable-queue corruption

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue plus the client ID and its metadata-map name as queue plus the client ID plus meta. A durable session whose client ID ends in meta can therefore make its message map collid...

8.8CVSS0.00341EPSS
SaveExploits1References4
OSV
OSV
•added 2026/09/23 4:29 p.m.•11 views

CVE-2026-95847 Moquette client IDs can cause cross-session H2 durable-queue corruption

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue plus the client ID and its metadata-map name as queue plus the client ID plus meta. A durable session whose client ID ends in meta can therefore make its message map collid...

8.8CVSS5.9AI score0.00429EPSS
SaveExploits7References6
Vulnrichment
Vulnrichment
•added 2026/09/23 4:29 p.m.•16 views

CVE-2026-95847 Moquette client IDs can cause cross-session H2 durable-queue corruption

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue plus the client ID and its metadata-map name as queue plus the client ID plus meta. A durable session whose client ID ends in meta can therefore make its message map collid...

8.8CVSS5.9AI score0.00341EPSS
SaveExploits1References4
Rows per page
Query Builder