CVE-2026-49199
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.
Risk Assessment
An attacker can remotely gain full control over the device, posing a risk of system integrity compromise and data leakage.
Recommendation
Immediately update the software to a version that fixes this vulnerability and restrict access to MQTT brokers to trusted sources only.
Other vulnerabilities in MQTT
See all- CVE-2026-22535High
An attacker with network access and valid credentials can, due to the unsecured (unencrypted) MQTT protocol, write to server topics on the board controlling MQTT communications.
- CVE-2026-69658Critical
MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions.
Original NVD description (English source)
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS