Approved changes feed: RSS · Atom
cpe:2.3:a:halfgaar:flashmq:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Halfgaar (49cb7ff0-c277-58d5-a258-6bdda4b65e1c) |
|---|---|
| Product | Flashmq (d82804b1-89b0-5832-a6d0-dc870907863b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-46411 |
vulnerable | 2026-07-29 00:54:58.899018 |
FlashMQ: Client can trigger uncaught exception on FlashMQ 1.26.1 and older
MEDIUM (6.5)
FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.2, authorized clients have the ability to exceed the permitted over-commit of their write buffer and triggering an internal safe-guard exception. This exception was in a path that was not catchable, and therefore causes a server abort. This issue has been patched in version 1.26.2.
Published: 2026-06-09T23:01:33.212Z
Updated: 2026-06-10T14:30:30.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42209 |
vulnerable | 2026-06-08 08:03:16.034226 |
FlashMQ: Division by zero crash when using non-default deferred retained message setting
MEDIUM (6.5)
FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.1, a remote client with retained publish permission can crash the FlashMQ broker when both set_retained_message_defer_timeout and set_retained_message_defer_timeout_spread are configured to non-default values, resulting in denial of service. If anonymous retained publishing is allowed, no authentication is required; otherwise, the attacker needs the corresponding publish permission. This issue has been patched in version 1.26.1.
Published: 2026-05-08T21:40:43.284Z
Updated: 2026-05-11T15:59:27.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62723 |
vulnerable | 2026-06-08 07:39:16.543835 |
FlashMQ does not release memory of queued QoS messages
MEDIUM (4.3)
FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.23.2, any authenticated user can create sessions and have them collect QoS messages. When not sent to a client, these are then not released upon (eventual) session expiration. Version 1.23.2 fixes the issue.
Published: 2025-10-24T20:16:34.047Z
Updated: 2025-10-24T20:32:00.596Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.