CVE-2026-25627

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.24.8, NanoMQ’s MQTT-over-WebSocket transport can be crashed by sending an MQTT packet with a deliberately large Remaining Length in the fixed header while providing a much shorter actual payload. The code path copies Remaining Length bytes without verifying that the current receive buffer contains that many bytes, resulting in an out-of-bounds read (ASAN reports OOB / crash). This is remotely triggerable over the WebSocket listener. This issue has been patched in version 0.24.8.

• CWE-125

• https://github.com/nanomq/NanoNNG/commit/e80b30bad6d855593a68d18f2785bfaca6faf09ePatch
• https://github.com/nanomq/NanoNNG/pull/1405Issue Tracking, Patch
• https://github.com/nanomq/nanomq/releases/tag/0.24.8Release Notes
• https://github.com/nanomq/nanomq/security/advisories/GHSA-w4rh-v3h2-j29xExploit, Vendor Advisory
• https://github.com/nanomq/nanomq/security/advisories/GHSA-w4rh-v3h2-j29xExploit, Vendor Advisory

Published

Mar 30, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2562A vulnerability was determined in JingDong JD Cloud Box AX66…8.8
• CVE-2026-25620An encrypted password command injection vulnerability exists…7
• CVE-2026-25621A Reports application infrastructure vulnerability exists in…7
• CVE-2026-25622A Captive Portal Custom Handler command injection vulnerabil…7
• CVE-2026-25623An input validation command execution vulnerability exists i…7
• CVE-2026-25624An administrative cross-site scripting (XSS) vulnerability e…4.8
• CVE-2026-25628Qdrant is a vector similarity search engine and vector datab…8.8
• CVE-2026-2563A vulnerability was identified in JingDong JD Cloud Box AX66…8.8
• CVE-2026-25630Rejected reason: Reason: This candidate was issued in error.
• CVE-2026-25631n8n is an open source workflow automation platform. Prior to…6.5
• CVE-2026-25632EPyT-Flow is a Python package designed for the easy generati…10
• CVE-2026-25633Statamic is a, Laravel + Git powered CMS designed for buildi…4.3