https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:32:23.042512+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2017-7650 Withdrawn: BELL-CVE-2017-7650 — CVE-2017-7650 does not affect BellSoft software 2026-10-03T00:32:23.159124+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2017-10548 cnvd-2017-10548 2026-10-03T00:32:23.159164+00:00 cnvd-2017-10548 https://cve.radiocsirt.org/vuln/euvd-2026-172328 EUVD-2026-172328 2026-10-03T00:32:23.159181+00:00 EUVD-2026-172328 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7650 fkie_cve-2017-7650 2026-10-03T00:32:23.159193+00:00

In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access control plugins for Mosquitto.

 https://cve.radiocsirt.org/vuln/ghsa-vcg2-pq78-9mhr GHSA-vcg2-pq78-9mhr 2026-10-03T00:32:23.159233+00:00

In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access control plugins for Mosquitto.

 https://cve.radiocsirt.org/vuln/gsd-2017-7650 gsd-2017-7650 2026-10-03T00:32:23.159251+00:00 gsd-2017-7650 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11057-1 openSUSE-SU-2024:11057-1 — libmosquitto1-2.0.11-1.2 on GA media 2026-10-03T00:32:23.159262+00:00

libmosquitto1-2.0.11-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7650 UBUNTU-CVE-2017-7650 2026-10-03T00:32:23.159283+00:00

Affected: Ubuntu:14.04:LTS: mosquitto, Ubuntu:16.04:LTS: mosquitto

In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same issue may be present in third party authentication/access control plugins for Mosquitto.