Known Vulnerabilities for Nanomq by Emqx
Listed below are 10 of the newest known vulnerabilities associated with "Nanomq" by "Emqx".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-47276 json | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker t... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-47275 json | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicious MQ... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-36590 json | An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in brok... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-35217 json | NanoMQ contains a protocol-semantics flaw in its MQTT v5 `SUBSCRIBE` handling: if a subscription entry is missing the final 1... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-34608 json | Not Provided | 2026-04-02 | 2026-07-24 | |
| CVE-2026-32696 json | Not Provided | 2026-03-30 | 2026-04-13 | |
| CVE-2026-32135 json | Not Provided | 2026-04-20 | 2026-04-22 | |
| CVE-2026-25627 json | Not Provided | 2026-03-30 | 2026-04-02 | |
| CVE-2024-48077 json | Not Provided | 2026-01-15 | 2026-04-03 | |
| CVE-2023-34494 json | NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c. | 7.5 - HIGH | 2023-06-12 | 2023-06-16 |