CVE-2026-79390: n/a

CVE-2026-79390 describes an information disclosure vulnerability in Trueview TI8161 version 6.0.23.4. The device communicates MQTT messages in plaintext over TCP port 1883 without encryption or authentication. An attacker with network access can passively intercept MQTT traffic and obtain sensitive information such as device identifiers and control-related data. The vulnerability is due to the lack of encryption in MQTT communication, exposing sensitive operational data to network eavesdropping.

An unauthenticated attacker on the same network segment can intercept MQTT traffic and obtain sensitive information including device identifiers, message metadata, and control-related information. This compromises confidentiality but does not impact integrity or availability of the device or its communications.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, mitigating this vulnerability involves securing the network segment to restrict unauthorized access and using network-level encryption or VPNs to protect MQTT traffic. Consider configuring MQTT to use TLS (MQTTS) if supported by the device or deploying network segmentation to isolate the device.