EEMQX

Products

Exploited and recent CVEs

• CVE-2026-44725 Medium 6.6 EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution 0.4%
• CVE-2026-30867 Medium 5.7 CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing 0.3%
• CVE-2025-62413 Medium 6.1 MQTTX vulnerable to cross-site scripting via improper message payload rendering 0.3%
• CVE-2025-52136 Low 3.0 In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the intended behavior; however, 5.8.6 adds a def 0.3%
• CVE-2024-10965 Medium 4.3 emqx neuron JSON File schema information disclosure 0.5%
• CVE-2024-10964 Medium 6.3 emqx neuron plugin_handle.c handle_add_plugin buffer overflow 0.7%