CVE-2026-44091

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...

EUVD-2026-51026

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...

CVE-2026-44091

CVE-2026-44091 describes an unauthenticated remote attacker who can post a malicious ID to the MQTT Broker, causing the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss. The published CVSS metrics indicate a high severity: CVSS 4....

PT-2026-66419

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description The MQTT Service contains a Server-Side Request Forgery SSRF flaw. An unauthenticated remote attacker can send a malicious ID to the MQTT Broker, which allows the...

MAL-2025-39556 Malicious code in xanadu-decoherence-epigenetics-xanadu (npm)

The package xanadu-decoherence-epigenetics-xanadu was found to contain malicious code...

MAL-2025-34789 Malicious code in test-mlw1-guaco-whoso (npm)

The package test-mlw1-guaco-whoso was found to contain malicious code...

MAL-2025-38594 Malicious code in vortex-everest-nsp484-project (npm)

The package vortex-everest-nsp484-project was found to contain malicious code...

MAL-2025-39878 Malicious code in xml-query-minify-error-lambda (npm)

The package xml-query-minify-error-lambda was found to contain malicious code...

MAL-2025-40112 Malicious code in yak-amber-nea697-project (npm)

The package yak-amber-nea697-project was found to contain malicious code...

MAL-2025-35330 Malicious code in test-mlw2-fever-teeth-blare-lives (npm)

The package test-mlw2-fever-teeth-blare-lives was found to contain malicious code...

MAL-2025-38904 Malicious code in wave-k5s1h-twv5o-throne-project (npm)

The package wave-k5s1h-twv5o-throne-project was found to contain malicious code...

MAL-2025-7206 Malicious code in @crabas0npm/consectetur-tempore-ullam-ipsam (npm)

The package @crabas0npm/consectetur-tempore-ullam-ipsam was found to contain malicious code...

MAL-2025-9071 Malicious code in @malware-test-white-brake-daffy-sarge/test-mlw3-white-brake-daffy-sarge (npm)

The package @malware-test-white-brake-daffy-sarge/test-mlw3-white-brake-daffy-sarge was found to contain malicious code...