Log in Start free

nanomq

Products

ProductCVEsExploitedLatest
nanomq20–Sep 18, 2026
NanoNNG1–May 19, 2026

Exploited and recent CVEs

  • CVE-2026-73863 High 7.0 NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing 0.4%
  • CVE-2026-61633 Low 2.0 NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoS 0.3%
  • CVE-2026-44639 Low 3.7 NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing 0.4%
  • CVE-2026-47276 Medium 6.5 NULL Pointer Dereference in REST API properties_parse via Malformed user_properties 0.4%
  • CVE-2026-47275 Low 2.6 nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS 0.3%
  • CVE-2026-35217 Medium 6.5 NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read 0.3%
  • CVE-2026-45151 Low 2.9 NanoMQ: NULL Pointer Dereference 0.2%
  • CVE-2026-44640 Medium 4.5 NanoMQ: QUIC Dialer Close Type Confusion <0.1%
  • CVE-2026-32134 Medium 5.9 NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore 0.4%
  • CVE-2026-32134 Medium 5.9 NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore 0.4%
  • CVE-2026-32135 High 7.7 NanoMQ has Heap Buffer Overflow in URI Parameter Parsing 0.5%
  • CVE-2026-34608 Medium 4.9 nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read 0.4%
  • CVE-2026-32696 Low 3.1 NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerable 0.4%
  • CVE-2026-25627 Medium 6.5 nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket 0.5%
  • CVE-2026-21888 High 7.5 MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() 0.4%
  • CVE-2026-22040 Medium 5.3 NanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crash 0.3%
  • CVE-2025-68699 Medium 6.5 NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash 0.3%
  • CVE-2025-66023 Medium 6.9 NanoMQ has Use-After-Free of malformed bridging message 0.4%
  • CVE-2025-59946 High 7.5 NanoMQ has a Use After Free vulnerability via sub info list 0.4%
  • CVE-2025-59947 High 8.5 NanoMQ has Buffer Overflow 0.3%
  • CVE-2025-65953 Medium 6.0 NanoMQ UAF of retain message due to invalid MQTTV5 properties 0.2%