Known Vulnerabilities for Nanomq by Emqx
Listed below are 10 of the newest known vulnerabilities associated with "Nanomq" by "Emqx".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73863 json | NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmq_subinfo_decode() function in nng/src/sp/protocol... | Not Provided | 2026-09-18 | 2026-09-24 |
| CVE-2026-61633 json | NanoMQ is an MQTT broker. Prior to 0.24.14, the NanoMQ client function nni_mqtt_msg_decode_unsubscribe() in nng/src/supplemen... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-47276 json | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker t... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-47275 json | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicious MQ... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-44639 json | NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's MQTT v5 property decoder in nng/src/supplemental/mqtt/mqtt_codec.c uses ... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-36590 json | An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in brok... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-35217 json | NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SUBSCRIBE` handling: if a subscription entry is missing the final 1... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-34608 json | Not Provided | 2026-04-02 | 2026-07-24 | |
| CVE-2026-32696 json | Not Provided | 2026-03-30 | 2026-04-13 | |
| CVE-2026-32135 json | Not Provided | 2026-04-20 | 2026-04-22 |