CVE-2026-95848

Moquette is a lightweight Java MQTT broker.

Moquette

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to AcceptAllAuthenticator or PermitAllAuthorizatorPolicy. A misspelled class name, missing dependency, constructor failure, or classpath problem can therefore start the broker with authentication or…

23. Sep 2026

Ausgewertete Quellen

• NVD
  CVE-2026-95848
• GitHub
  https://github.com/moquette-io/moquette/security/advisories/GHSA-5f42-97gr-vfhq