CVE-2026-49198CWE-284

Predator Connect W6x: MQTT Broker Access Control

High · published May 29, 2026

CVSS v4.0
8.3
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00345 · 26.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-05-29T08:30Z
EPSS history
Timeline
  • 29 MAY 08:30Z
    Predator Connect W6x: MQTT Broker Access Control
    cvelistv5