PatchTheCVEflashmq vulnerabilities and fixes
Recent CVEs affecting flashmq, with upgrade or downgrade steps. 3 tracked.
flashmq has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-10-24. Highest priority: CVE-2024-42645 (score 48/100).
- CVE-2025-62723 MEDIUM 4.3 UPGRADE FlashMQ is a MQTT broker/server, designed for multi-CPU environments
- CVE-2024-42645 HIGH 7.5 DOWNGRADE An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain messag
- CVE-2024-42644 HIGH 7.5 DOWNGRADE FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPubli
FAQ
How do I fix flashmq vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flashmq being exploited right now?
None of the tracked flashmq CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flashmq CVE should I patch first?
CVE-2024-42645 currently ranks highest (48/100): An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain messag.