CVE-2026-44090

CriticalCVSS 9.8

Published: 30/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

Missing authentication in the MQTT broker allows an unauthenticated remote attacker to access the broker, which is only protected from external access by a firewall. This may lead to full compromise of the device.

Risk Assessment

Risk of full device compromise by an attacker, potentially leading to breach of confidentiality, integrity, and availability of data and services.

Recommendation

Implement authentication for the MQTT broker and consider additional security measures such as encryption and access control.

Original NVD description (English source)

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised.