agentprime: nanomqEvery new CVE for nanomq.https://agentprime.io/CVE-2026-73863: NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsinghttps://agentprime.io/advisories/CVE-2026-73863/https://agentprime.io/advisories/CVE-2026-73863/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 16:20:18 GMTCVECVE-2026-61633: NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoShttps://agentprime.io/advisories/CVE-2026-61633/https://agentprime.io/advisories/CVE-2026-61633/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 16:18:57 GMTCVECVE-2026-44639: NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsinghttps://agentprime.io/advisories/CVE-2026-44639/https://agentprime.io/advisories/CVE-2026-44639/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 16:17:56 GMTCVECVE-2026-47276: NULL Pointer Dereference in REST API properties_parse via Malformed user_propertieshttps://agentprime.io/advisories/CVE-2026-47276/https://agentprime.io/advisories/CVE-2026-47276/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:44:44 GMTCVECVE-2026-47275: nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoShttps://agentprime.io/advisories/CVE-2026-47275/https://agentprime.io/advisories/CVE-2026-47275/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:43:03 GMTCVECVE-2026-35217: NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Readhttps://agentprime.io/advisories/CVE-2026-35217/https://agentprime.io/advisories/CVE-2026-35217/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:39:49 GMTCVECVE-2026-45151: NanoMQ: NULL Pointer Dereferencehttps://agentprime.io/advisories/CVE-2026-45151/https://agentprime.io/advisories/CVE-2026-45151/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 19:30:37 GMTCVECVE-2026-44640: NanoMQ: QUIC Dialer Close Type Confusionhttps://agentprime.io/advisories/CVE-2026-44640/https://agentprime.io/advisories/CVE-2026-44640/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 19:28:47 GMTCVECVE-2026-32134: NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restorehttps://agentprime.io/advisories/CVE-2026-32134/https://agentprime.io/advisories/CVE-2026-32134/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 17:22:13 GMTCVECVE-2026-32135: NanoMQ has Heap Buffer Overflow in URI Parameter Parsinghttps://agentprime.io/advisories/CVE-2026-32135/https://agentprime.io/advisories/CVE-2026-32135/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 19:23:09 GMTCVECVE-2026-34608: nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Readhttps://agentprime.io/advisories/CVE-2026-34608/https://agentprime.io/advisories/CVE-2026-34608/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 17:52:51 GMTCVECVE-2026-32696: NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerablehttps://agentprime.io/advisories/CVE-2026-32696/https://agentprime.io/advisories/CVE-2026-32696/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 20:11:30 GMTCVECVE-2026-25627: nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSockethttps://agentprime.io/advisories/CVE-2026-25627/https://agentprime.io/advisories/CVE-2026-25627/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 20:11:08 GMTCVECVE-2026-21888: MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer()https://agentprime.io/advisories/CVE-2026-21888/https://agentprime.io/advisories/CVE-2026-21888/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 15:22:32 GMTCVECVE-2026-22040: NanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crashhttps://agentprime.io/advisories/CVE-2026-22040/https://agentprime.io/advisories/CVE-2026-22040/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 21:55:11 GMTCVECVE-2025-68699: NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crashhttps://agentprime.io/advisories/CVE-2025-68699/https://agentprime.io/advisories/CVE-2025-68699/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 19:25:12 GMTCVECVE-2025-66023: NanoMQ has Use-After-Free of malformed bridging messagehttps://agentprime.io/advisories/CVE-2025-66023/https://agentprime.io/advisories/CVE-2025-66023/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Jan 2026 15:11:46 GMTCVECVE-2025-59946: NanoMQ has a Use After Free vulnerability via sub info listhttps://agentprime.io/advisories/CVE-2025-59946/https://agentprime.io/advisories/CVE-2025-59946/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 Dec 2025 00:40:51 GMTCVECVE-2025-59947: NanoMQ has Buffer Overflowhttps://agentprime.io/advisories/CVE-2025-59947/https://agentprime.io/advisories/CVE-2025-59947/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Dec 2025 20:19:17 GMTCVECVE-2025-65953: NanoMQ UAF of retain message due to invalid MQTTV5 propertieshttps://agentprime.io/advisories/CVE-2025-65953/https://agentprime.io/advisories/CVE-2025-65953/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 23:13:09 GMTCVE