CVE-2026-85724

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are configured, AuthorizationsCollector.canDoOperation substitutes client ID and username values directly into rules containing %c or %u and then treats the result as an MQTT topic filter. A client that uses + or # in either identity can broaden the substituted filter and gain cross-tenant read and write access. A # identity can also produce an invalid filter that triggers a NullPointerException in Topic.match and disrupts session processing. This issue is fixed in version 0.18.1.

• CWE-155
• CWE-863

• https://github.com/moquette-io/moquette/commit/b4a98bb3f3425ece476ed073aa080c627c1239afPatch
• https://github.com/moquette-io/moquette/releases/tag/v0.18.1Release Notes
• https://github.com/moquette-io/moquette/security/advisories/GHSA-5f42-97gr-vfhqExploit, Mitigation, Vendor Advisory
• https://github.com/moquette-io/moquette/security/advisories/GHSA-5f42-97gr-vfhqExploit, Mitigation, Vendor Advisory

Published

Sep 23, 2026

Last Modified

Sep 25, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85717The AsyncHttpClient (AHC) library allows Java applications t…6.8
• CVE-2026-85718The AsyncHttpClient (AHC) library allows Java applications t…5.9
• CVE-2026-85719The AsyncHttpClient (AHC) library allows Java applications t…7.5
• CVE-2026-8572Insufficient policy enforcement in Network in Google Chrome …3.1
• CVE-2026-85720The AsyncHttpClient (AHC) library allows Java applications t…5.9
• CVE-2026-85721The AsyncHttpClient (AHC) library allows Java applications t…7.5
• CVE-2026-85725LightRAG provides simple and fast retrieval-augmented genera…5.9
• CVE-2026-8573Integer overflow in Codecs in Google Chrome on Windows prior…8.3
• CVE-2026-85730smol-toml is a small, fast, and correct TOML parser and seri…8.2
• CVE-2026-85731oras-go is a Go library for managing OCI artifacts. Prior to…8.8
• CVE-2026-85732oras-go is a Go library for managing OCI artifacts. Prior to…4.7
• CVE-2026-85734LightRAG provides simple and fast retrieval-augmented genera…9.1