netty-codec-mqtt vulnerabilities

CVEs whose affected-version data names the netty-codec-mqtt package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93575High· 7.5

4d ago

A flaw was found in Netty's MqttDecoder

A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Re…

▾ TwilightRed Hat · netty-codec-mqttEPSS 0.39%via NVD