CVE-2026-22535
FRAIL SECURITY IN MQTT PROTOCOL ALLOWS AN ATTACKER MODIFY CRITICAL PARAMETERS
High · published January 7, 2026
What it is
An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured (unencrypted) MQTT communications protocol, write on the server topics of the board that controls the MQTT communications
The record
Technical detail
- CVSS v4.0
- 8.9 · HIGH
- Vector
- CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS
- 0.00148 · 3.7th percentile
- Published
- 2026-01-07T16:37Z
EPSS history
Timeline