CVE Catalog
CVE-2026-69658
CriticalCVSS 9.8Summary
MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions.
Risk Assessment
The organization is at risk of credential interception and control data exposure, potentially leading to device takeover and communication disruption.
Recommendation
Implement encryption for MQTT traffic (e.g., TLS) and enforce client authentication.
Original NVD description (English source)
MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions.