eclipse mosquitto

Name: eclipse mosquitto
Brand: eclipse

productUS

cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical14high11medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-7651US	high7.5	5.12% (92nd)	Exploit	no fix	2018-04-24	≤ 1.4.14
CVE-2024-10525US	critical9.8	59.2% (99th)	—	2.0.19	2024-10-30	1.3.2 → 2.0.19
CVE-2018-12543US	high7.5	36.0% (98th)	—	no fix	2018-11-15	1.5.0 → 1.5.2
CVE-2019-11779US	medium6.5	2.74% (86th)	—	1.6.6	2019-09-19	2 versions
CVE-2017-7650US	medium6.5	2.47% (84th)	—	1.4.12	2017-09-11	< 1.4.12
CVE-2017-7654US	high7.5	2.18% (82nd)	—	no fix	2018-06-05	≤ 1.4.15
CVE-2017-7655US	high7.5	1.76% (78th)	—	no fix	2019-03-27	1.0 → 1.4.15
CVE-2018-20145US	high7.5	1.65% (76th)	—	1.5.5	2018-12-13	1.5 → 1.5.5
CVE-2017-7652US	high7.5	1.62% (76th)	—	no fix	2018-04-25	1.0 → 1.4.14
CVE-2018-12551US	high8.1	1.47% (74th)	—	no fix	2019-03-27	1.0 → 1.5.5
CVE-2017-7653US	medium5.3	1.44% (73rd)	—	no fix	2018-06-05	≤ 1.4.15
CVE-2021-41039US	high7.5	1.35% (71st)	—	no fix	2021-12-01	1.6 → 2.0.11
CVE-2018-12550US	high8.1	1.35% (71st)	—	no fix	2019-03-27	1.0 → 1.5.5
CVE-2021-34434US	medium5.3OT elevated	1.33% (71st)	—	no fix	2021-08-30	2.0.0 → 2.0.11
CVE-2023-28366US	high7.5	1.31% (70th)	—	2.0.16	2023-09-01	1.3.2 → 2.0.16
CVE-2021-34432US	high7.5	1.25% (69th)	—	no fix	2021-07-27	≤ 2.0.7
CVE-2021-34431US	medium6.5	1.11% (66th)	—	no fix	2021-07-22	1.6 → 2.0.10
CVE-2021-28166US	medium6.5	0.97% (62nd)	—	no fix	2021-04-07	2.0.0 → 2.0.9
CVE-2023-5632US	high7.5	0.80% (57th)	—	no fix	2023-10-18	= 2.0.5
CVE-2018-12546US	medium6.5	0.80% (56th)	—	no fix	2019-03-27	1.0 → 1.5.5
CVE-2023-3592US	high7.5	0.79% (56th)	—	2.0.16	2023-10-02	< 2.0.16
CVE-2019-11778US	medium5.4	0.76% (55th)	—	1.6.5	2019-09-18	1.6 → 1.6.5
CVE-2024-8376US	high7.5	0.75% (55th)	—	2.0.19	2024-10-11	< 2.0.19
CVE-2024-3935US	medium6.5	0.75% (55th)	—	2.0.19	2024-10-30	2.0.0 → 2.0.19
CVE-2023-0809US	medium5.3	0.71% (53rd)	—	2.0.16	2023-10-02	< 2.0.16
CVE-2017-9868US	medium5.5	0.36% (30th)	—	no fix	2017-06-25	≤ 1.4.12

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime6 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-789Memory Allocation with Excessive Size Value3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-416Use After Free2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs
CWE-1050Excessive Platform Resource Consumption within a Loop1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan