emqx nanomq

Name: emqx nanomq
Brand: emqx

productUS

cpe:2.3:a:emqx:nanomq:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical15high4medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-36590US	—	0.59% (48th)	Exploit	no fix	2026-07-15	= 0.24.9
CVE-2023-33660US	high7.5	1.20% (68th)	—	no fix	2023-06-08	= 0.17.2
CVE-2023-33658US	high7.5	1.20% (68th)	—	no fix	2023-06-08	= 0.17.2
CVE-2023-33659US	high7.5	1.07% (65th)	—	no fix	2023-06-06	= 0.17.2
CVE-2023-33657US	high7.5	0.96% (61st)	—	no fix	2023-06-08	= 0.17.2
CVE-2023-29996US	high7.5	0.84% (58th)	—	no fix	2023-05-04	= 0.15.0
CVE-2023-29995US	high7.5	0.73% (54th)	—	no fix	2023-05-04	= 0.15.0
CVE-2023-29994US	high7.5	0.73% (54th)	—	no fix	2023-05-04	= 0.15.0
CVE-2023-34494US	high7.5	0.67% (52nd)	—	no fix	2023-06-12	= 0.16.5
CVE-2024-42650US	—	0.65% (51st)	—	no fix	2025-07-15	= 0.17.5
CVE-2024-25767US	—	0.65% (51st)	—	no fix	2024-02-26	= 0.21.2
CVE-2024-31040US	—	0.58% (47th)	—	no fix	2024-04-17	= 0.21.7
CVE-2024-31041US	—	0.56% (46th)	—	no fix	2024-04-17	= 0.21.7
CVE-2023-34488US	high7.8	0.51% (43rd)	—	no fix	2023-06-12	= 0.17.5
CVE-2026-32135US	high7.5	0.50% (43rd)	—	0.24.11	2026-04-20	< 0.24.11
CVE-2026-25627US	high7.5	0.49% (42nd)	—	0.24.8	2026-03-30	< 0.24.8
CVE-2024-44460US	high7.5	0.49% (42nd)	—	no fix	2024-09-12	= 0.21.9
CVE-2024-42646US	high7.5	0.47% (41st)	—	no fix	2025-07-14	= 0.21.10
CVE-2024-42651US	—	0.46% (40th)	—	no fix	2025-07-29	= 0.17.9
CVE-2026-32696US	high7.5	0.41% (36th)	—	0.24.7	2026-03-30	< 0.24.7
CVE-2024-42655US	—	0.40% (34th)	—	no fix	2025-07-29	= 0.21.8
CVE-2023-33656US	medium5.5	0.38% (32nd)	—	no fix	2023-05-30	= 0.17.2
CVE-2024-42648US	medium6.5	0.38% (32nd)	—	no fix	2025-07-14	= 0.22.10
CVE-2025-59946US	—	0.38% (31st)	—	0.24.4	2025-12-27	< 0.24.4
CVE-2025-66023US	medium4.9	0.37% (31st)	—	0.24.5	2026-01-01	< 0.24.5
CVE-2026-34608US	high8.2	0.36% (30th)	—	0.24.10	2026-04-02	< 0.24.10
CVE-2024-42649US	medium6.5	0.36% (29th)	—	no fix	2025-07-14	= 0.22.10
CVE-2024-48077US	—	0.34% (28th)	—	no fix	2026-01-15	= 0.22.7
CVE-2024-31036US	—	0.33% (26th)	—	no fix	2024-04-22	= 0.21.7
CVE-2025-59947US	critical9.0	0.33% (26th)	—	0.24.4	2025-12-15	< 0.24.4
CVE-2026-21888US	—	0.32% (25th)	—	no fix	2026-03-11	≤ 0.24.6
CVE-2025-68699US	—	0.32% (24th)	—	no fix	2026-02-04	= 0.24.6
CVE-2026-22040US	—	0.24% (15th)	—	0.24.6	2026-03-04	< 0.24.6

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write7 CVEs
CWE-416Use After Free6 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-476NULL Pointer Dereference5 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan