PatchTheCVEcoremqtt vulnerabilities and fixes
Recent CVEs affecting coremqtt, with upgrade or downgrade steps. 1 tracked.
coremqtt has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-05-15. Highest priority: CVE-2026-8686 (score 39/100).
- CVE-2026-8686 HIGH 7.5 DOWNGRADE Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to c
FAQ
How do I fix coremqtt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is coremqtt being exploited right now?
None of the tracked coremqtt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which coremqtt CVE should I patch first?
CVE-2026-8686 currently ranks highest (39/100): Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to c.