Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-46411

FlashMQ: Client can trigger uncaught exception on FlashMQ 1.26.1 and older

Description

FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.2, authorized clients have the ability to exceed the permitted over-commit of their write buffer and triggering an internal safe-guard exception. This exception was in a path that was not catchable, and therefore causes a server abort. This issue has been patched in version 1.26.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

halfgaar FlashMQ

  • < 1.26.2affected

References