nanomq vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 202617

Newest CVEs

• CVE-2026-73863

  NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing

  nanomq · nanomq

  High7.0
• CVE-2026-61633

  NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoS

  nanomq · nanomq

  Low2.0
• CVE-2026-44639

  NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing

  nanomq · nanomq

  Low3.7
• CVE-2026-47276

  NULL Pointer Dereference in REST API properties_parse via Malformed user_properties

  nanomq · nanomq

  Medium6.5
• CVE-2026-47275

  nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS

  nanomq · nanomq

  Low2.6
• CVE-2026-35217

  NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read

  nanomq · nanomq

  Medium6.5
• CVE-2026-45151

  NanoMQ: NULL Pointer Dereference

  nanomq · nanomq

  Low2.9
• CVE-2026-44640

  NanoMQ: QUIC Dialer Close Type Confusion

  nanomq · nanomq

  Medium4.5
• CVE-2026-32134

  NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore

  nanomq · nanomq

  Medium5.9
• CVE-2026-32135

  NanoMQ has Heap Buffer Overflow in URI Parameter Parsing

  nanomq · nanomq

  High7.7