Nanomq vulnerabilities

Products

• Nanomq 21

Newest

• nanomq NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing CVE-2026-73863 7.0 HighSeptember 18, 2026
• nanomq NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoS CVE-2026-61633 2.0 LowSeptember 18, 2026
• nanomq NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing CVE-2026-44639 3.7 LowSeptember 18, 2026
• nanomq NULL Pointer Dereference in REST API properties_parse via Malformed user_properties CVE-2026-47276 6.5 MediumJuly 20, 2026
• nanomq nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS CVE-2026-47275 2.6 LowJuly 20, 2026
• nanomq NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read CVE-2026-35217 6.5 MediumJuly 20, 2026
• nanomq NanoMQ: NULL Pointer Dereference CVE-2026-45151 2.9 LowMay 29, 2026
• nanomq NanoMQ: QUIC Dialer Close Type Confusion CVE-2026-44640 4.5 MediumMay 29, 2026
• nanomq, nanomq nanonng +1 more NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore CVE-2026-32134 5.9 MediumMay 19, 2026
• emqx nanomq NanoMQ has Heap Buffer Overflow in URI Parameter Parsing CVE-2026-32135 7.7 HighApril 20, 2026
• emqx nanomq nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read CVE-2026-34608 4.9 MediumApril 2, 2026
• emqx nanomq NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerable CVE-2026-32696 3.1 LowMarch 30, 2026
• emqx nanomq nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket CVE-2026-25627 6.5 MediumMarch 30, 2026
• emqx nanomq MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() CVE-2026-21888 7.5 HighMarch 11, 2026
• emqx nanomq NanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crash CVE-2026-22040 5.3 MediumMarch 4, 2026
• emqx nanomq NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash CVE-2025-68699 6.5 MediumFebruary 4, 2026
• emqx nanomq NanoMQ has Use-After-Free of malformed bridging message CVE-2025-66023 6.9 MediumJanuary 1, 2026
• emqx nanomq NanoMQ has a Use After Free vulnerability via sub info list CVE-2025-59946 7.5 HighDecember 27, 2025
• emqx nanomq NanoMQ has Buffer Overflow CVE-2025-59947 8.5 HighDecember 15, 2025
• nanomq NanoMQ UAF of retain message due to invalid MQTTV5 properties CVE-2025-65953 6.0 MediumNovember 25, 2025
• emqx nanomq A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows... CVE-2024-31036 6.8 MediumApril 22, 2024