NVD CRITICAL: CVE-2026-44091 — An unauthenticated remote attacker can post a malicious ID to the MQTT Broker re...

Thursday, July 30, 2026 at 07:16 AM UTC·Source: NIST NVD

Updated: Thursday, July 30, 2026 at 08:00 AM UTC

Executive Summary

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-44091

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Jul 30, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

N-Able Flaw Exposes MSPs to Worst Case Scenario

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/n-able-flaw-exposes-msps-to-worst-case-scenario-image_small-10-a-32397.jpg" align=right hspace=4><b>Remote Management and Monitoring Tools Widely Used by Managed Security Providers</b><br>Remote management and monitoring software developer N-Able published a second hotfix to patch a vulnerability in all versions of its N-central s

24m agoBank Info Security

MEDIUMVulnerabilityNEW

Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations

A cyberattack compromised tens of thousands of records related to companies, foundations and trusts in Liechtenstein, prompting the government to to form a “crisis unit” to address the breach.

49m agoThe Record

HIGHVulnerability

NVD HIGH: CVE-2026-67611 — OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allow...

OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an unauthenticated client registration endpoint. Attackers can register an OAuth2 client via the unauthenticated registration endpoint and use the password grant to exchange credenti

CVE-2026-67611

1h agoNIST NVD