Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

nanomq — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in nanomq, with AI-generated Chinese analysis, references, and POCs.

Vendor: nanomq

CVE IDTitleCVSSSeverityPublished
CVE-2026-32135 NanoMQ has Heap Buffer Overflow in URI Parameter Parsing CWE-122 9.8AICriticalAI2026-04-20
CVE-2026-34608 nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read CWE-125 4.9 Medium2026-04-02
CVE-2026-32696 NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerable CWE-476 3.1 Low2026-03-30
CVE-2026-25627 nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket CWE-125 6.5 Medium2026-03-30
CVE-2026-21888 MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() CWE-125 7.5 High2026-03-11
CVE-2026-22040 NanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crash CWE-416 5.3 Medium2026-03-04
CVE-2025-68699 NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash CWE-476 6.5 Medium2026-02-04
CVE-2025-66023 NanoMQ has Use-After-Free of malformed bridging message CWE-416 7.5 -2026-01-01
CVE-2025-59946 NanoMQ has a Use After Free vulnerability via sub info list CWE-416 7.5 High2025-12-27
CVE-2025-59947 NanoMQ has Buffer Overflow CWE-120 9.8AICriticalAI2025-12-15
CVE-2025-65953 NanoMQ UAF of retain message due to invalid MQTTV5 properties CWE-416 7.5AIHighAI2025-11-25

All 11 known CVE vulnerabilities affecting nanomq with full Chinese analysis, references, and POCs where available.