CVE-2026-79389: n/a

CVE-2026-79389 describes an improper verification vulnerability in the MQTT command processing of Trueview T18161 S version 6.0.23.4. This flaw allows an attacker with network access to replay or alter captured MQTT messages, including security-related fields like nonce, timestamp, and signature. Because the device does not properly validate these fields, it accepts the modified messages and executes the commands contained within them. This vulnerability is classified under CWE-347 (Improper Verification of Cryptographic Signature).

An attacker who can access the network can manipulate MQTT messages to execute unauthorized commands on the device. This can lead to a compromise of confidentiality and integrity, as indicated by the CVSS vector (Confidentiality: High, Integrity: High, Availability: None). There is no indication of availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting network access to trusted sources and employing network-level protections may help reduce exposure.