CVE-2026-32696

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In NanoMQ version 0.24.6, after enabling auth.http_auth (HTTP authentication), when a client connects to the broker using MQTT CONNECT without providing username/password, and the configuration params uses the placeholders %u / %P (e.g., username="%u", password="%P"), the HTTP request construction phase enters auth_http.c:set_data(). This results in calling strlen() on a NULL pointer, causing a SIGSEGV crash. This crash can be triggered remotely, resulting in a denial of service. This issue has been patched in version 0.24.7.

• CWE-476

• https://github.com/nanomq/NanoNNG/commit/c20aa27e5290bb480a5315099952480d35f37a8bPatch
• https://github.com/nanomq/NanoNNG/pull/1394Issue Tracking, Patch
• https://github.com/nanomq/nanomq/releases/tag/0.24.7Product, Release Notes
• https://github.com/nanomq/nanomq/security/advisories/GHSA-77f4-wvq8-mp3pExploit, Vendor Advisory

Published

Mar 30, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32690Secrets in Variables saved as JSON dictionaries were not pro…3.7
• CVE-2026-32691A race condition in the secrets management subsystem of Juju…5.3
• CVE-2026-32692An authorization bypass vulnerability in the Vault secrets b…6.5
• CVE-2026-32693In Juju from version 3.0.0 through 3.6.18, the authorization…8.8
• CVE-2026-32694In Juju from version 3.0.0 through 3.6.18, when a secret own…6.6
• CVE-2026-32695Traefik is an HTTP reverse proxy and load balancer. Prior to…7.7
• CVE-2026-32697SuiteCRM is an open-source, enterprise-ready Customer Relati…6.5
• CVE-2026-32698OpenProject is an open-source, web-based project management …7.2
• CVE-2026-32699FacturaScripts is an open source accounting and invoicing so…5.3
• CVE-2026-3270A vulnerability has been found in psi-probe PSI Probe up to …8.8
• CVE-2026-32700Devise is an authentication solution for Rails based on Ward…5.3
• CVE-2026-32701Qwik is a performance-focused JavaScript framework. Versions…7.5