CVE-2026-126495

MQTTX desktop versions through 1.13.3 are vulnerable to a stored cross-site scripting (XSS) vulnerability. An attacker who controls an MQTT broker or can publish to subscribed topics can inject malicious scripts by publishing crafted MQTT topic names or payloads . These scripts are rendered unesc...