Skip to content
Emqx vulnerabilities
Newest
-
emqx neuron
NEURON through 9.0.2 Stack-based Buffer Overflow via CoreNEURON dataset tokens
CVE-2026-123203
6.9 Medium
-
emqx
EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution
CVE-2026-44725
6.6 Medium
-
emqx nanomq
An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the...
CVE-2026-36590
Public exploit
7.5 High
-
emqx
EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition
CVE-2026-8741
2.3 Low
-
emqx nanomq
NanoMQ has Heap Buffer Overflow in URI Parameter Parsing
CVE-2026-32135
7.7 High
-
emqx nanomq
nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read
CVE-2026-34608
4.9 Medium
-
emqx cocoamqtt
CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing
CVE-2026-30867
Fix available
5.7 Medium
-
emqx nanomq
NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerable
CVE-2026-32696
3.1 Low
-
emqx nanomq
nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket
CVE-2026-25627
6.5 Medium
-
emqx nanomq
MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer()
CVE-2026-21888
7.5 High
-
emqx nanomq
NanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crash
CVE-2026-22040
5.3 Medium
-
emqx nanomq
NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash
CVE-2025-68699
6.5 Medium
-
emqx nanomq
An issue in nanomq v0.22.7 allows attackers to cause a Denial of Service (DoS) via a crafted...
CVE-2024-48077
7.5 High
-
emqx nanomq
NanoMQ has Use-After-Free of malformed bridging message
CVE-2025-66023
6.9 Medium
-
emqx nanomq
NanoMQ has a Use After Free vulnerability via sub info list
CVE-2025-59946
7.5 High
-
emqx nanomq
NanoMQ has Buffer Overflow
CVE-2025-59947
8.5 High
-
emqx mqttx
MQTTX vulnerable to cross-site scripting via improper message payload rendering
CVE-2025-62413
6.1 Medium
-
emqx
In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web...
CVE-2025-52136
Public exploitDisputed
3.0 Low
-
emqx nanomq
An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and...
CVE-2024-42655
8.8 High
-
emqx nanomq
NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component...
CVE-2024-42651
7.5 High
-
emqx nanomq
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq...
CVE-2024-42650
7.5 High
-
emqx nanomq
NanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial...
CVE-2024-42649
6.5 Medium
-
emqx nanomq
NanoMQ v0.22.10 was discovered to contain a heap overflow which allows attackers to cause a...
CVE-2024-42648
6.5 Medium
-
emqx nanomq
A segmentation fault in NanoMQ v0.21.10 allows attackers to cause a Denial of Service (DoS) via...
CVE-2024-42646
7.5 High
-
emqx neuron
emqx neuron JSON File schema information disclosure
CVE-2024-10965
5.3 Medium
-
emqx neuron
emqx neuron plugin_handle.c handle_add_plugin buffer overflow
CVE-2024-10964
5.3 Medium
-
emqx nanomq
An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service (DoS).
CVE-2024-44460
7.5 High
-
emqx nanomq
A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows...
CVE-2024-31036
6.8 Medium
-
emqx nanomq
Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21...
CVE-2024-31041
7.5 High
-
emqx nanomq
Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ 0.21.7...
CVE-2024-31040
2.7 Low
-
emqx nanomq
nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.
CVE-2024-25767
6.5 Medium
-
emqx
An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal...
CVE-2023-37781
6.5 Medium
-
emqx nanomq
NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.
CVE-2023-34494
7.5 High
-
emqx nanomq
NanoMQ 0.17.5 is vulnerable to heap-buffer-overflow in the conn_handler function of mqtt_parser.c...
CVE-2023-34488
7.8 High
-
emqx nanomq
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered...
CVE-2023-33660
7.5 High
-
emqx nanomq
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered...
CVE-2023-33658
7.5 High
-
emqx nanomq
A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by...
CVE-2023-33657
7.5 High
-
emqx nanomq
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered...
CVE-2023-33659
7.5 High
-
emqx nanomq
A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file...
CVE-2023-33656
5.5 Medium
-
emqx nanomq
In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of...
CVE-2023-29996
7.5 High
-
emqx nanomq
In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c
CVE-2023-29995
7.5 High
-
emqx nanomq
In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.
CVE-2023-29994
7.5 High
-
emqx
** UNSUPPORTED WHEN ASSIGNED ** EMQ X Dashboard V3.0.0 is affected by username enumeration in the...
CVE-2021-46434
5.3 Medium
-
emq technologies x broker, emqx emq x broker +1 more
EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of...
CVE-2021-33175
7.5 High