Skip to content
OpenAdvisories

Product · emqx

MQTTX

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-126495

    MQTTX through 1.13.3 Stored XSS via Topic Tree and JSON Tree Tooltips

    MQTTX desktop through 1.13.3 contains a stored cross-site scripting vulnerability that allows attackers to inject script by publishing malicious MQTT topic names or payloads rendered unescaped in tooltips. Attackers controlling a broker or publishing to subsc…

    emqx MQTTX
  • Medium 6.1
    CVE-2025-62413

    MQTTX vulnerable to cross-site scripting via improper message payload rendering

    MQTTX is an MQTT 5.0 desktop client and MQTT testing tool. A Cross-Site Scripting (XSS) vulnerability was introduced in MQTTX v1.12.0 due to improper handling of MQTT message payload rendering. Malicious payloads containing HTML or JavaScript could be rendere…

    emqx MQTTX