moquette records

8 published records for vendor moquette.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2026-85724No exploit	Moquette pattern ACL wildcard injection allows cross-tenant authorization bypassmoquette · moquette · CWE-155	Critical9.6	—	0.3%	Sep 23, 2026
37Monitor	CVE-2026-95848No exploit	Moquette fails open when configured authentication or authorization classes cannot loadmoquette · moquette · CWE-636 Pre-auth	Critical9.3	—	0.4%	Sep 23, 2026
35Monitor	CVE-2026-95847No exploit	Moquette client IDs can cause cross-session H2 durable-queue corruptionmoquette · moquette · CWE-99 Pre-auth	High8.8	—	0.3%	Sep 23, 2026
34Monitor	CVE-2026-95843No exploit	Moquette malformed shared subscriptions can crash command processingmoquette · moquette · CWE-20 Pre-auth	High8.7	—	0.4%	Sep 23, 2026
34Monitor	CVE-2026-95842No exploit	Moquette uncaught MQTT command exceptions can terminate shared session event loopsmoquette · moquette · CWE-248 Pre-auth	High8.7	—	0.4%	Sep 23, 2026
34Monitor	CVE-2026-95844No exploit	Moquette deeply nested MQTT topics can cause stack exhaustionmoquette · moquette · CWE-674 Pre-auth Denial of service	High8.7	—	0.4%	Sep 23, 2026
34Monitor	CVE-2026-95845No exploit	Moquette unbounded per-session message queues allow memory exhaustionmoquette · moquette · CWE-770 Pre-auth Denial of service	High8.7	—	0.4%	Sep 23, 2026
34Monitor	CVE-2026-95846No exploit	Moquette publishes Last-Will messages without enforcing write authorizationmoquette · moquette · CWE-862 Pre-auth Broken access control (IDOR)	High8.7	—	0.3%	Sep 23, 2026

CVE-2026-85724
38Monitor
Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass
CriticalCVSS 9.6No exploitEPSS 0%
moquette · moquetteSep 23, 2026
CVE-2026-95848
37Monitor
Moquette fails open when configured authentication or authorization classes cannot load
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
moquette · moquetteSep 23, 2026
CVE-2026-95847
35Monitor
Moquette client IDs can cause cross-session H2 durable-queue corruption
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
moquette · moquetteSep 23, 2026
CVE-2026-95843
34Monitor
Moquette malformed shared subscriptions can crash command processing
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
moquette · moquetteSep 23, 2026
CVE-2026-95842
34Monitor
Moquette uncaught MQTT command exceptions can terminate shared session event loops
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
moquette · moquetteSep 23, 2026
CVE-2026-95844
34Monitor
Moquette deeply nested MQTT topics can cause stack exhaustion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
moquette · moquetteSep 23, 2026
CVE-2026-95845
34Monitor
Moquette unbounded per-session message queues allow memory exhaustion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
moquette · moquetteSep 23, 2026
CVE-2026-95846
34Monitor
Moquette publishes Last-Will messages without enforcing write authorization
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
moquette · moquetteSep 23, 2026