CVE-2026-49186

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The local MQTT broker fails to enforce topic-level Access Control Lists (ACLs), which are rules that define which clients can access specific topics. This allows any client to use wildcard characters (# or +) to enumerate hidden network devices or publish unauthorized control commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.