CYBERHAWK / CVE / CVE-2026-49186

CVE-2026-49186

MQTT Broker

CRITICAL CVSS 9.8 vibe oss

The flaw

Missing topic-level ACLs allow wildcard subscription and rogue commands.

What to do

Configure MQTT broker ACLs or update to patched version

▸ Scan my repo for CVE-2026-49186

References

First seen 2026-06-05 · Tracked by PickBits CyberHawk · Weekly CVE digest