io.moquette:moquette-broker vulnerabilities

CVEs whose affected-version data names the io.moquette:moquette-broker package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85058High· 7.5PoC

1w ago

Moquette is a lightweight Java MQTT broker

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last Will message through publish2Subscribers without invoking the authorizator.canWrite check used by normal PUBLISH paths…

▾ Midnightmoquette · io.moquette:moquette-brokerEPSS 0.45%via NVD