CVE-2026-8686
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
May 15, 2026
Vendor
unknown
Description
Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users should upgrade to v5.0.1.