Threats tagged 'ghsa-2vfr-ch7v-7754'

A vulnerability in Meari IoT Cloud MQTT Broker deployments running EMQX 4.x allows any authenticated low-privilege user to subscribe to global wildcard topics and receive telemetry data from devices they do not own. While publish restrictions are enforced, subscribe authorization is not enforced at the per-device level, leading to unauthorized data access.