Search

Find a vulnerability

Search criteria

    2 vulnerabilities by MrSteam

    CVE-2026-95699 (GCVE-0-2026-95699)

    Vulnerability from nvd – Published: 2026-09-24 20:39 – Updated: 2026-09-25 16:16
    VLAI
    Title
    MrSteam iSteamX Improper Isolation or Compartmentalization
    Summary
    Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other connected users' devices. This risked exposing user profile information and potential scalding due to unintended device activation.
    Severity
    8.4 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:H
    9.6 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-25 16:16 UTC
    CWE
    • CWE-653 - Improper isolation or compartmentalization
    Assigner
    References
    Impacted products
    Date Public
    2026-09-24 16:17
    Credits
    Darren Challis
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-95699",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-25T16:16:01.270470Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-25T16:16:48.362Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSteamX application",
          "vendor": "MrSteam",
          "versions": [
            {
              "status": "affected",
              "version": "v1.3.42 (build 44)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSteamX Hub",
          "vendor": "MrSteam",
          "versions": [
            {
              "status": "affected",
              "version": "v4.2.1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Darren Challis"
        }
      ],
      "datePublic": "2026-09-24T16:17:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003ePrior to 9/18/2026, the iSteamX mobile application\u0027s AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users\u0027 device data and allow the attacker to start and stop other connected users\u0027 devices. This risked exposing user profile information and potential scalding due to unintended device activation.\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Prior to 9/18/2026, the iSteamX mobile application\u0027s AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users\u0027 device data and allow the attacker to start and stop other connected users\u0027 devices. This risked exposing user profile information and potential scalding due to unintended device activation."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-653",
              "description": "CWE-653 Improper isolation or compartmentalization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T20:39:59.975Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-267-01.json"
        },
        {
          "url": "https://www.mrsteam.com/contactus/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eThe vendor has implemented countermeasures to mitigate this vulnerability and is in effect as of 9/18/2026. Affected users are encouraged to contact them for more information at (\u003cspan\u003e\u003ca href=\"https://www.mrsteam.com/contactus/\"\u003ehttps://www.mrsteam.com/contactus/\u003c/a\u003e)\u003c/span\u003e\u003cspan\u003e.\u003c/span\u003e\u003c/div\u003e"
            }
          ],
          "value": "The vendor has implemented countermeasures to mitigate this vulnerability and is in effect as of 9/18/2026. Affected users are encouraged to contact them for more information at ( https://www.mrsteam.com/contactus/ )."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "MrSteam iSteamX Improper Isolation or Compartmentalization",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-95699",
    "datePublished": "2026-09-24T20:39:59.975Z",
    "dateReserved": "2026-09-22T14:36:39.739Z",
    "dateUpdated": "2026-09-25T16:16:48.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-95699 (GCVE-0-2026-95699)

    Vulnerability from cvelistv5 – Published: 2026-09-24 20:39 – Updated: 2026-09-25 16:16
    VLAI
    Title
    MrSteam iSteamX Improper Isolation or Compartmentalization
    Summary
    Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other connected users' devices. This risked exposing user profile information and potential scalding due to unintended device activation.
    Severity
    8.4 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:H
    9.6 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-25 16:16 UTC
    CWE
    • CWE-653 - Improper isolation or compartmentalization
    Assigner
    References
    Impacted products
    Date Public
    2026-09-24 16:17
    Credits
    Darren Challis
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-95699",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-25T16:16:01.270470Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-25T16:16:48.362Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSteamX application",
          "vendor": "MrSteam",
          "versions": [
            {
              "status": "affected",
              "version": "v1.3.42 (build 44)"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSteamX Hub",
          "vendor": "MrSteam",
          "versions": [
            {
              "status": "affected",
              "version": "v4.2.1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Darren Challis"
        }
      ],
      "datePublic": "2026-09-24T16:17:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003ePrior to 9/18/2026, the iSteamX mobile application\u0027s AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users\u0027 device data and allow the attacker to start and stop other connected users\u0027 devices. This risked exposing user profile information and potential scalding due to unintended device activation.\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Prior to 9/18/2026, the iSteamX mobile application\u0027s AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users\u0027 device data and allow the attacker to start and stop other connected users\u0027 devices. This risked exposing user profile information and potential scalding due to unintended device activation."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-653",
              "description": "CWE-653 Improper isolation or compartmentalization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T20:39:59.975Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-267-01.json"
        },
        {
          "url": "https://www.mrsteam.com/contactus/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eThe vendor has implemented countermeasures to mitigate this vulnerability and is in effect as of 9/18/2026. Affected users are encouraged to contact them for more information at (\u003cspan\u003e\u003ca href=\"https://www.mrsteam.com/contactus/\"\u003ehttps://www.mrsteam.com/contactus/\u003c/a\u003e)\u003c/span\u003e\u003cspan\u003e.\u003c/span\u003e\u003c/div\u003e"
            }
          ],
          "value": "The vendor has implemented countermeasures to mitigate this vulnerability and is in effect as of 9/18/2026. Affected users are encouraged to contact them for more information at ( https://www.mrsteam.com/contactus/ )."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "MrSteam iSteamX Improper Isolation or Compartmentalization",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-95699",
    "datePublished": "2026-09-24T20:39:59.975Z",
    "dateReserved": "2026-09-22T14:36:39.739Z",
    "dateUpdated": "2026-09-25T16:16:48.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}