CVE-2026-77060

The boneIO black_debian_images product incorrectly configures permissions for the Mosquitto MQTT broker password file located at /etc/mosquitto/passwd . Because the file is stored with world-readable permissions , any local user can access the password hashes for all MQTT accounts, enabling them ...