Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-79391 EUVD-2026-71740GHSA-747v-rwmr-3qwh

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requ…

Published Sep 4, 2026 · Updated Sep 8, 2026 · Assigned by mitre

Description

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations.

References