CVE-2026-25627 | NanoMQ MQTT Broker up to 0.24.7 MQTT Packet out-of-bounds (GHSA-w4rh-v3h2-j29x)

March 31, 2026 Yanac

A vulnerability marked as problematic has been reported in NanoMQ MQTT Broker up to 0.24.7. Affected by this issue is some unknown functionality of the component MQTT Packet Handler. Performing a manipulation results in out-of-bounds read.

This vulnerability is reported as CVE-2026-25627. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More