CVE-2026-8686

High

Published: 15/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet.

Risk Assessment

The organization may experience a denial of service, potentially leading to disruptions in systems utilizing MQTT.

Recommendation

It is recommended to upgrade to v5.0.1 to remediate this vulnerability.

Original NVD description (English source)

Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users should upgrade to v5.0.1.