CVE Explorer

CVE-2026-44640

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to 0.24.14, aio->prov_data is stored as nni_quic_conn* during dialing, but read as ex_quic_conn* during dialer close. This type confusion causes invalid object interpretation and leads to close-path hang/crash behavior. This vulnerability is fixed in 0.24.14.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:67d8f3e5b8535ddb718449a825e028480ef22a8ca067fd677495caa1238d65ee

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"nanomq","vendor":"nanomq","versions":[{"status":"affected","version":"< 0.24.14"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a70cd3431b6a9d09c5c9c5a230a0f67c6c13e7f8daf5ec792357f53887fe4556 · sha256:4688e256b24647da… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:a70cd3431b6a9d09c5c9c5a230a0f67c6c13e7f8daf5ec792357f53887fe4556 · sha256:4688e256b24647da… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-843","description":"CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:a70cd3431b6a9d09c5c9c5a230a0f67c6c13e7f8daf5ec792357f53887fe4556 · sha256:4688e256b24647da… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions

{"name":"https://github.com/nanomq/nanomq/releases/tag/0.24.14","tags":["x_refsource_MISC"],"url":"https://github.com/nanomq/nanomq/releases/tag/0.24.14"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a70cd3431b6a9d09c5c9c5a230a0f67c6c13e7f8daf5ec792357f53887fe4556 · sha256:4688e256b24647da… · /containers/cna/references/1

{"name":"https://github.com/nanomq/nanomq/security/advisories/GHSA-9fgw-v323-jmjj","tags":["x_refsource_CONFIRM"],"url":"https://github.com/nanomq/nanomq/security/advisories/GHSA-9fgw-v323-jmjj"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a70cd3431b6a9d09c5c9c5a230a0f67c6c13e7f8daf5ec792357f53887fe4556 · sha256:4688e256b24647da… · /containers/cna/references/0

{"tags":["exploit"],"url":"https://github.com/nanomq/nanomq/security/advisories/GHSA-9fgw-v323-jmjj"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a70cd3431b6a9d09c5c9c5a230a0f67c6c13e7f8daf5ec792357f53887fe4556 · sha256:4688e256b24647da… · /containers/adp/0/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer