CyberRota
← Ana sayfaya dön

CVE-2026-49186

CRITICAL · CVSS 9.8 EPSS %0.32

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-04T04:17:15.550 · Çekilme zamanı: 2026-06-30T12:09:28.420053+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-49186
Severity
CRITICAL
CVSS
9.8
EPSS
%0.32

Orijinal NVD Açıklaması

The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.