CVE-2026-44091 — Creation of a new configuration by posting a malicious ID to MQTT
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to …
Published: 2026-07-30 · CVSS: 8.8 · CVSS 4.0
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7