CVE-2026-44090
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Missing authentication in the MQTT broker allows an unauthenticated remote attacker to access the broker, which is only protected from external access by a firewall. This may lead to full compromise of the device.
Risk Assessment
Risk of full device compromise by an attacker, potentially leading to breach of confidentiality, integrity, and availability of data and services.
Recommendation
Implement authentication for the MQTT broker and consider additional security measures such as encryption and access control.
Other vulnerabilities in MQTT broker
See all- CVE-2026-44091Critical
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker, resulting in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.
- CVE-2026-49186Critical
The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). Any client can subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.
- CVE-2026-49198Medium
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.
Original NVD description (English source)
Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised.