moquette kayıtları
moquette üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-155 Improper Neutralization of Wildcards or Matching Symbols1
- CWE-20 Improper Input Validation1
- CWE-248 Uncaught Exception1
- CWE-636 Not Failing Securely ('Failing Open')1
- CWE-674 Uncontrolled Recursion1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
38İzleyin | CVE-2026-85724İstismar yok | Moquette pattern ACL wildcard injection allows cross-tenant authorization bypassmoquette · moquette · CWE-155 | Kritik9,6 | — | %0,3 | 23 Eyl 2026 |
37İzleyin | CVE-2026-95848İstismar yok | Moquette fails open when configured authentication or authorization classes cannot loadmoquette · moquette · CWE-636 | Kritik9,3 | — | %0,4 | 23 Eyl 2026 |
35İzleyin | CVE-2026-95847İstismar yok | Moquette client IDs can cause cross-session H2 durable-queue corruptionmoquette · moquette · CWE-99 | Yüksek8,8 | — | %0,3 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95843İstismar yok | Moquette malformed shared subscriptions can crash command processingmoquette · moquette · CWE-20 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95842İstismar yok | Moquette uncaught MQTT command exceptions can terminate shared session event loopsmoquette · moquette · CWE-248 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95844İstismar yok | Moquette deeply nested MQTT topics can cause stack exhaustionmoquette · moquette · CWE-674 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95845İstismar yok | Moquette unbounded per-session message queues allow memory exhaustionmoquette · moquette · CWE-770 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95846İstismar yok | Moquette publishes Last-Will messages without enforcing write authorizationmoquette · moquette · CWE-862 | Yüksek8,7 | — | %0,3 | 23 Eyl 2026 |
- CVE-2026-8572438İzleyin
Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass
KritikCVSS 9,6İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584837İzleyin
Moquette fails open when configured authentication or authorization classes cannot load
KritikCVSS 9,3İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584735İzleyin
Moquette client IDs can cause cross-session H2 durable-queue corruption
YüksekCVSS 8,8İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584334İzleyin
Moquette malformed shared subscriptions can crash command processing
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584234İzleyin
Moquette uncaught MQTT command exceptions can terminate shared session event loops
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584434İzleyin
Moquette deeply nested MQTT topics can cause stack exhaustion
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584534İzleyin
Moquette unbounded per-session message queues allow memory exhaustion
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584634İzleyin
Moquette publishes Last-Will messages without enforcing write authorization
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026