moquette-io moquette

• CVE-2026-95848 Critical 9.3 Moquette fails open when configured authentication or authorization classes cannot load 0.4%
• CVE-2026-95847 High 8.8 Moquette client IDs can cause cross-session H2 durable-queue corruption 0.3%
• CVE-2026-95846 High 8.7 Moquette publishes Last-Will messages without enforcing write authorization 0.3%
• CVE-2026-95845 High 8.7 Moquette unbounded per-session message queues allow memory exhaustion 0.4%
• CVE-2026-95844 High 8.7 Moquette deeply nested MQTT topics can cause stack exhaustion 0.4%
• CVE-2026-95843 High 8.7 Moquette malformed shared subscriptions can crash command processing 0.4%
• CVE-2026-95842 High 8.7 Moquette uncaught MQTT command exceptions can terminate shared session event loops 0.4%
• CVE-2026-85724 Critical 9.6 Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass 0.3%
• CVE-2026-85058 High 7.5 Moquette: Missing Authorization in io.moquette:moquette-broker 0.6%