e
emq
Security Risk Profile
31
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 10, 2025 to present
8
Total CVEs
4
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
4.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
31/100
low
Severity Distribution
Critical
0High
4Medium
0Low
4Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
2
2
Race Condition
1
Most Affected Products
1. EMQ NanoMQ4
2. emqx Nanomq3
3. EMQ EMQX3
4. emqx emqx1
5. Meari Meari IoT Cloud MQTT Broker1
Recent Vulnerabilities
See more →CVE-2026-36590
CVSS 7.5high
Jul 15, 2026🔧 No Patch
CVE-2026-45151
CVSS 2.9low
NanoMQ: NULL Pointer Dereference
May 29, 2026🔧 No Patch
CVE-2026-8741
CVSS 1.3EPSS 0%low
EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition
May 17, 2026🔧 No Patch
CVE-2026-33356
CVSS 7.7high
Meari MQTT broker missing per-device subscribe ACL
May 11, 2026🔧 No Patch
CVE-2026-6564
CVSS 2.1EPSS 0%low
EMQ EMQX Enterprise Session Handling improper authorization
Apr 19, 2026🔧 No Patch
CVE-2026-32696
CVSS 7.5high
NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerable
Mar 30, 2026
CVE-2026-25627
CVSS 7.5high
nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket
Mar 30, 2026
CVE-2025-52136
CVSS 3.0low
Aug 10, 2025🔧 No Patch
Monitor emq in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.