https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:33:18.330006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324545 EUVD-2026-324545 2026-10-10T19:33:18.385654+00:00 EUVD-2026-324545 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49186 fkie_cve-2026-49186 2026-10-10T19:33:18.385694+00:00

The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.

 https://cve.radiocsirt.org/vuln/ghsa-vvpf-h42q-v96v GHSA-vvpf-h42q-v96v 2026-10-10T19:33:18.385728+00:00

The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.