Denial of Service in EMQ NanoMQ

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: MITRE

Description

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-15

Generated

2026-07-16

AI Q&A

2026-07-16

EPSS Evaluated

N/A

NVD

CVE-2026-36590

Affected Vendors & Products

Vendor	Product	Version / Range
emq	namomq	0.24.9

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in EMQ NanoMQ version 0.24.9. It is caused by a flaw in the nni_qos_db_set function within the broker_tcp.c component, which can be exploited by a remote attacker.

Impact Analysis

The vulnerability may allow an attacker to disrupt the availability of EMQ NanoMQ services by causing a denial of service. This could lead to service outages or degraded performance for systems relying on this software.

Mitigation Strategies

Update EMQ NanoMQ to a version that patches the vulnerability in the nni_qos_db_set function in broker_tcp.c. If an update is not available, consider disabling affected components or restricting network access to vulnerable services.

Hi! I’m here to help you understand CVE-2026-36590. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70