Approved changes feed: RSS · Atom

cpe:2.3:a:freertos:coremqtt:5.0.0:*:*:*:*:*:*:*

part: a version: 5.0.0 update: *

VendorFreertos (b5a989c8-84b0-54a8-895d-f23b74cdf599)
ProductCoremqtt (ffb5eab0-bd67-5c30-8399-9d7c4b1ad693)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freertos/coremqtt purl2cpe 2026-06-01 10:12:06.235078

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8686 vulnerable 2026-06-08 08:08:58.542543 DoS from MQTT v5.0 Deserialization Fault in core MQTT
HIGH (7.5)
Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users should upgrade to v5.0.1.
Published: 2026-05-15T18:38:10.651Z
Updated: 2026-05-15T20:22:58.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.