Skip to content
OpenAdvisories

Vendor

halfgaar

3 known vulnerabilities.

Products

FlashMQ 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-46411

    FlashMQ: Client can trigger uncaught exception on FlashMQ 1.26.1 and older

    FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.2, authorized clients have the ability to exceed the permitted over-commit of their write buffer and triggering an internal safe-guard exception. This exception was in…

    halfgaar FlashMQ
  • Medium 6.5
    CVE-2026-42209

    FlashMQ: Division by zero crash when using non-default deferred retained message setting

    FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.1, a remote client with retained publish permission can crash the FlashMQ broker when both set_retained_message_defer_timeout and set_retained_message_defer_timeout_sp…

    halfgaar FlashMQ
  • Medium 4.3
    CVE-2025-62723

    FlashMQ does not release memory of queued QoS messages

    FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.23.2, any authenticated user can create sessions and have them collect QoS messages. When not sent to a client, these are then not released upon (eventual) session expira…

    halfgaar FlashMQ