CRITICAL 9.3 NVD

CVE-2026-69658

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized dev

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions.

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-06.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

Published: 2026-08-28 · Source: NVD · Feed updated: 2026-08-28

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-08-28 via NVD.

Risk Timeline

CVE Disclosed2026-08-28 · -1 days ago

Remediation Resources

CISA / KEV

www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

GitHub

github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-

vulnfeed aggregates 11380 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.