1091 matches found
CVE-2026-44092
An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss...
UBUNTU-CVE-2026-59878
Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apach...
CVE-2026-59878
CVE-2026-59878 : Apache ActiveMQ AMQP/NIO frame size validation issue leading to DoS. A remote unauthenticated attacker can send a crafted frame size to exhaust NIO threads and deny service. Affected versions: ActiveMQ AMQP before 5.19.9 (and 6.0.0 before 6.2.8); ActiveMQ before 5.19.9 (and 6.0.0...
rabbitmq-server: RabbitMQ: Authorization bypass via regular expression injection in MQTT client ID
A flaw was found in RabbitMQ. An authenticated MQTT Message Queuing Telemetry Transport user can bypass topic-level authorization by injecting regular expression operators. This occurs because the client ID, provided by the user in the MQTT CONNECT packet, is inserted into authorization regex...
The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Exploit for CVE-2026-54992
CVE-2026-54992 PoC Proof of concept for the Microsoft Message...
CVE-2026-60065
When NGINX Plus is configured to use the Message Queuing Telemetry Transport MQTT filter module ngxstreammqttfiltermodule, unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-read in the NGINX worker process, leading to a restart...
EUVD-2026-44685
When NGINX Plus is configured to use the Message Queuing Telemetry Transport MQTT filter module ngxstreammqttfiltermodule, unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-read in the NGINX worker process, leading to a restart...
CVE-2026-60065
CVE-2026-60065 affects NGINX Plus when the MQTT filter module (ngx_stream_mqtt_filter_module) is enabled. Unauthenticated attackers can send crafted requests to trigger a heap buffer over-read in an NGINX worker process, potentially causing a restart. Impact is limited to data-plane availability ...
RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks
...
EUVD-2026-44068
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
EUVD-2026-44013
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally...
CVE-2026-50505
Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network...
CVE-2026-50447
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-50439
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
Vulnerabilities in Microsoft Windows
Microsoft has fixed a very large number of vulnerabilities in Windows. A malicious actor could exploit these vulnerabilities to carry out attacks that could result in the types of damage listed in the table below. The most serious vulnerabilities have the following identifiers: CVE-2026-49172,...
CVE-2026-54992
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally...
CVE-2026-54115 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
...
CVE-2026-54115
CVE-2026-54115 is a Windows Message Queuing (MSMQ) elevation of privilege vulnerability with an integer overflow/wraparound issue described as affecting Windows Active Directory. The CVE entry indicates an authorized, local attacker can elevate privileges. Public references show multiple advisori...