moquette-io

Wednesday, September 23

• GitHub CVE-2026-85724
  Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug

  • moquette-io moquette
  • Critical
  • CVSS 9.6
  • EPSS 0.27%
  • Fixed version listed
  16:11 UTC