CVE-2026-77060
— UNSCOREDPublished 2026-10-26 · Updated 2026-10-26
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
boneIO black_debian_images stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd with world-readable permissions. Any local user can read the password hashes for all MQTT accounts and perform offline dictionary attacks. This issue was fixed in version 1.6.0.
Weaknesses
CWE-732
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2025-30051
- UNSCOREDCVE-2025-30054
- HIGHCVE-2026-101020
- HIGHCVE-2026-102282PoC
- MEDIUMCVE-2026-102740PoC
- MEDIUMCVE-2026-104618
- UNSCOREDCVE-2026-104854PoC
- MEDIUMCVE-2026-105165PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.