Product by Moquette-io
Moquette
9 known vulnerabilities in Moquette (Moquette-io), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-95848 | Moquette fails open when configured authentication or authorization classes cannot load | 9.1 | |
| High | CVE-2026-95842 | Moquette uncaught MQTT command exceptions can terminate shared session event loops | 7.5 | |
| High | CVE-2026-85058 | Moquette: Missing Authorization in io.moquette:moquette-broker | 7.5 | |
| High | CVE-2026-95843 | Moquette malformed shared subscriptions can crash command processing | 7.5 | |
| High | CVE-2026-95844 | Moquette deeply nested MQTT topics can cause stack exhaustion | 7.5 | |
| High | CVE-2026-95845 | Moquette unbounded per-session message queues allow memory exhaustion | 7.5 | |
| Critical | CVE-2026-85724 | Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass | 9.6 | |
| High | CVE-2026-95847 | Moquette client IDs can cause cross-session H2 durable-queue corruption | 7.5 | |
| High | CVE-2026-95846 | Moquette publishes Last-Will messages without enforcing write authorization | 7.5 |