Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a… (CVE-2026-44090)
An unauthenticated remote attacker can access the MQTT broker due to missing authentication controls. The broker is only protected by a firewall restricting external access. This vulnerability may allow the attacker to fully compromise the affected device.
AI Analysis
Technical Summary
CVE-2026-44090 describes a vulnerability where the MQTT broker lacks authentication mechanisms, enabling unauthenticated remote attackers to connect. The only protection is a firewall limiting external access, which may be bypassed or insufficient. Exploitation could lead to full device compromise. The vulnerability is categorized under CWE-306 (Missing Authentication for Critical Function). No patch or official remediation information is currently available.
Potential Impact
An attacker who can reach the MQTT broker can access it without authentication, potentially leading to full compromise of the device hosting the broker. This represents a critical security risk as unauthorized control or data access is possible.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, network-level protections such as strict firewall rules and network segmentation should be enforced to restrict access to the MQTT broker. Consider disabling or isolating the broker if not required.
Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a… (CVE-2026-44090)
Description
An unauthenticated remote attacker can access the MQTT broker due to missing authentication controls. The broker is only protected by a firewall restricting external access. This vulnerability may allow the attacker to fully compromise the affected device.
CVSS v4.0
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-44090 describes a vulnerability where the MQTT broker lacks authentication mechanisms, enabling unauthenticated remote attackers to connect. The only protection is a firewall limiting external access, which may be bypassed or insufficient. Exploitation could lead to full device compromise. The vulnerability is categorized under CWE-306 (Missing Authentication for Critical Function). No patch or official remediation information is currently available.
Potential Impact
An attacker who can reach the MQTT broker can access it without authentication, potentially leading to full compromise of the device hosting the broker. This represents a critical security risk as unauthorized control or data access is possible.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, network-level protections such as strict firewall rules and network segmentation should be enforced to restrict access to the MQTT broker. Consider disabling or isolating the broker if not required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9h9r-3q9w-h7vj
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-44090"]
- Ecosystems
- []
- Database Specific Severity
- CRITICAL
- Cvss Version
- 4.0
Threat ID: 6a6b72bc9c2644c7f847454b
Added to database: 07/30/2026, 15:50:20 UTC
Last enriched: 07/30/2026, 20:07:04 UTC
Last updated: 07/31/2026, 03:31:55 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.