CVE-2026-79391

CVSS 9.8 (critical) · published 2026-09-04

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations.

Weakness: CWE-306

Source: NVD CVE-2026-79391

References

• https://github.com/EmbdCDACHyd/CVE/blob/main/CVE-2026-79391/README.md

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.