CVE-2026-95848 | moquette-io Moquette up to 0.18.0 Authenticator/Authorizator improper authorization

September 23, 2026 Yanac

A vulnerability labeled as critical has been found in moquette-io Moquette up to 0.18.0. This affects the function Server.initializeAuthenticator/Server.initializeAuthorizatorPolicy of the component Authenticator/Authorizator. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-95848. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More