The Eclipse Foundation Eclipse Mosquitto

Name: The Eclipse Foundation Eclipse Mosquitto
Brand: The Eclipse Foundation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical9high7medium0low

updated 2026-10-28

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-7651US	high7.5	5.12% (92nd)	Exploit	no fix	2018-04-24	≤ 1.4.14
CVE-2018-12543US	high7.5	36.0% (98th)	—	unspecified	2018-11-15	2 versions
CVE-2019-11779US	medium6.5	2.74% (86th)	—	no fix	2019-09-19	≤ 1.5.0 to 1.6.5 inclusive
CVE-2017-7654US	high7.5	2.18% (82nd)	—	no fix	2018-06-05	≤ unspecified ≤1.4.15
CVE-2017-7655US	high7.5	1.76% (78th)	—	unspecified	2019-03-27	2 versions
CVE-2017-7652US	high7.5	1.62% (76th)	—	no fix	2018-04-25	≤ 1.4.14
CVE-2018-12551US	high8.1	1.47% (74th)	—	unspecified	2019-03-27	2 versions
CVE-2017-7653US	medium5.3	1.44% (73rd)	—	no fix	2018-06-05	≤ unspecified ≤1.4.15
CVE-2021-41039US	high7.5	1.35% (72nd)	—	unspecified	2021-12-01	2 versions
CVE-2018-12550US	high8.1	1.35% (71st)	—	unspecified	2019-03-27	2 versions
CVE-2021-34434US	medium5.3OT elevated	1.33% (71st)	—	unspecified	2021-08-30	2 versions
CVE-2021-34432US	high7.5	1.25% (69th)	—	no fix	2021-07-27	≤ unspecified ≤2.0.7
CVE-2021-34431US	medium6.5	1.11% (66th)	—	unspecified	2021-07-22	2 versions
CVE-2021-28166US	medium6.5	0.97% (62nd)	—	unspecified	2021-04-07	2 versions
CVE-2018-12546US	medium6.5	0.80% (57th)	—	unspecified	2019-03-27	2 versions
CVE-2019-11778US	medium5.4	0.76% (55th)	—	no fix	2019-09-18	≤ 1.6.0 to 1.6.4

The flaw types (CWEs) most of these CVEs share.

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.