M
Vendor security profile
moquette
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical2
CISA KEV0
Public exploit9
Patch rate%89
Avg. CVSS8.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
9
0
CVE KEV
CVE severity distribution
9toplam CVE
Critical2 (22%)
High7 (78%)
Patch and exploitation view
%89
Verified patch
%0
CISA KEV
%100
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
9.3
CVE-2026-95848
Moquette fails open when configured authentication or authorization classes cannot load
M
Patch verifiedEPSS %0
8.8
CVE-2026-95847
Moquette client IDs can cause cross-session H2 durable-queue corruption
M
Patch verifiedEPSS %0
8.7
CVE-2026-95846
Moquette publishes Last-Will messages without enforcing write authorization
M
Patch verifiedEPSS %0
8.7
CVE-2026-95845
Moquette unbounded per-session message queues allow memory exhaustion
M
Patch verifiedEPSS %0
8.7
CVE-2026-95844
Moquette deeply nested MQTT topics can cause stack exhaustion
M
Patch verifiedEPSS %0
8.7
CVE-2026-95843
Moquette malformed shared subscriptions can crash command processing
M
Patch verifiedEPSS %0
8.7
CVE-2026-95842
Moquette uncaught MQTT command exceptions can terminate shared session event loops
M
Patch verifiedEPSS %0
9.6
CVE-2026-85724
Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass
M
Patch verifiedEPSS %0
7.5
CVE-2026-85058
Moquette: Missing Authorization in io.moquette:moquette-broker
M
Patch status unknownEPSS %0