CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

59649 matches found

attackerkb•added 2026/05/11 4:02 p.m.•11 views

CVE-2026-33356

In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. The broker enforces publish restrictions but does not enforce equivalent subscribe authorization a...

7.7CVSS5.8AI score0.00354EPSS

SaveExploits0References3Affected Software1

CVE•added 2026/05/11 4:02 p.m.•63 views

CVE-2026-33356

CVE-2026-33356 affects Meari IoT Cloud MQTT Broker deployments using EMQX 4.x. The issue is that authenticated low-privilege users can subscribe to global wildcard topics and access telemetry from devices they don’t own, because subscribe authorization is not enforced at per-device scope, while p...

7.7CVSS5.9AI score0.00354EPSS

SaveExploits0References2

Vulnrichment•added 2026/05/11 4:02 p.m.•11 views

CVE-2026-33356 Meari MQTT broker missing per-device subscribe ACL

7.7CVSS5.9AI score0.00354EPSS

SaveExploits0References2

SUSE CVE•added 2026/05/11 2:13 p.m.•16 views

SUSE CVE-2026-43443

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acpcardrt5682init and acpcardrt5682sinit functions did not check the return values of clkget. This could lead to a kernel crash when the invalid pointe...

5.5CVSS5.7AI score0.00143EPSS

SaveExploits0References17

SUSE CVE•added 2026/05/11 2:13 p.m.•22 views

SUSE CVE-2026-43454

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix for duplicate device in netdev hooks When handling NETDEVREGISTER notification, duplicate device registration must be avoided since the device may have been added by nftnetdevhookalloc already when creati...

7.8CVSS6.4AI score0.00173EPSS

SaveExploits0References3