Approved changes feed: RSS · Atom

cpe:2.3:a:freertos:coremqtt:5.0.0:*:*:*:*:*:*:*

part: a version: 5.0.0 update: *

VendorFreertos (b5a989c8-84b0-54a8-895d-f23b74cdf599)
ProductCoremqtt (ffb5eab0-bd67-5c30-8399-9d7c4b1ad693)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freertos/coremqtt purl2cpe 2026-11-03 09:58:29.633686

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8686 vulnerable 2026-06-08 08:08:58.542543 DoS from MQTT v5.0 Deserialization Fault in core MQTT
HIGH (7.5)
Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users should upgrade to v5.0.1.
Published: 2026-05-15T18:38:10.651Z
Updated: 2026-05-15T20:22:58.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.