CVE-2026-79389: Trueview T18161 S vulnerability
Published Sep 4, 2026
·Updated
Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the associated commands.
Affected Software
1 affected component
Trueview T18161 S=6.0.23.4
Event History
Sep 4, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What does an attacker need before attempting exploitation?
The attacker needs network access to the device and captured MQTT messages that can be replayed or modified.
2
Which message fields can be altered without preventing command execution?
Captured MQTT security-related nonce, timestamp, and signature fields can be replayed or modified, and the device accepts the altered messages and executes the associated commands.