CVE-2026-35217

NanoMQ contains a protocol-semantics flaw in its MQTT v5 "SUBSCRIBE" handling: if a subscription entry is missing the final 1-byte "Subscription Options" field, the broker may still accept the malformed packet and install the subscription into internal broker state. Under a specific packet-length...