Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

emqx vulnerabilities

7 published CVEs name emqx among the affected products.

Newest CVEs

  • CVE-2026-126495

    MQTTX through 1.13.3 Stored XSS via Topic Tree and JSON Tree Tooltips

    emqx · MQTTX

    Medium5.3
  • CVE-2026-44725

    EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution

    emqx · emqx

    Medium6.6
  • CVE-2026-30867

    CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing

    emqx · CocoaMQTT

    Medium5.7
  • CVE-2025-62413

    MQTTX vulnerable to cross-site scripting via improper message payload rendering

    emqx · MQTTX

    Medium6.1
  • CVE-2025-52136

    In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the…

    EMQX · EMQX

    Low3.0
  • CVE-2024-10965

    emqx neuron JSON File schema information disclosure

    emqx · neuron

    Medium5.3
  • CVE-2024-10964

    emqx neuron plugin_handle.c handle_add_plugin buffer overflow

    emqx · neuron

    Medium5.3