VYPR

moquette-broker

by Io.moquette

CVEs (1)

  • CVE-2026-85058higSep 18, 2026
    risk 0.38cvss epss

    ## Summary Moquette MQTT Broker fails to enforce ACL write permission checks when publishing Will (Last Will and Testament) messages on behalf of disconnected clients. All normal PUBLISH paths (`receivedPublishQos0`, `receivedPublishQos1`, `receivedPublishQos2`) correctly…