CVE-2026-49186

CVE-2026-49186 affects local MQTT brokers where topic-level ACLs are not enforced. This permits any client to subscribe with wildcard topics (# or +) to enumerate hidden devices or publish rogue control commands, enabling potential information disclosure and unauthorized actions. The provided doc...

CVE-2025-24248

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to enumerate devices that have signed into the user's Apple Account...