moquette vulnerabilities and fixes
Recent CVEs affecting moquette, with upgrade or downgrade steps. 8 tracked.
moquette has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-09-23. Highest priority: CVE-2026-95848 (score 51/100).
- CVE-2026-95844 HIGH 7.5 UPGRADE Moquette is a lightweight Java MQTT broker
- CVE-2026-95847 HIGH 7.5 UPGRADE Moquette is a lightweight Java MQTT broker
- CVE-2026-95848 CRITICAL 9.1 UPGRADE Moquette is a lightweight Java MQTT broker
- CVE-2026-85724 CRITICAL 9.6 UPGRADE Moquette is a lightweight Java MQTT broker
- CVE-2026-95842 HIGH 7.5 UPGRADE Moquette is a lightweight Java MQTT broker
- CVE-2026-95843 HIGH 7.5 UPGRADE Moquette is a lightweight Java MQTT broker
- CVE-2026-95845 HIGH 7.5 UPGRADE Moquette is a lightweight Java MQTT broker
- CVE-2026-95846 HIGH 7.5 UPGRADE Moquette is a lightweight Java MQTT broker
FAQ
How do I fix moquette vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is moquette being exploited right now?
None of the tracked moquette CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which moquette CVE should I patch first?
CVE-2026-95848 currently ranks highest (51/100): Moquette is a lightweight Java MQTT broker.