Authentication Bypass in MQTT Broker Exposing Devices to Remote Attacks

CVE-2026-44090

What is CVE-2026-44090?

The MQTT Broker is susceptible to an authentication bypass due to inadequate access controls. An unauthenticated remote attacker can exploit this vulnerability to gain unauthorized access to the broker, which is primarily secured by a firewall. This exposure can lead to the complete compromise of devices connected to the broker, enabling attackers to manipulate or steal sensitive data.

References