CVE Catalog
CVE-2026-44091
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker, resulting in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.
Risk Assessment
Risk includes unauthorized modification of system configuration, potentially disrupting system operation.
Recommendation
Implement authentication and authorization for MQTT Broker access and validate all IDs before processing.
Original NVD description (English source)
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.