CVE-2026-49199 — VulnIntel

CVE-2026-49199

CRITICAL

Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.

StatusAnalyzed

설명

Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.

Score Summary

CVSS Score: 10.0
Version: 4.0
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 100.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 100.00
VPI formula vpi-v1
EPSS: 1.3%
(상위 68.1%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction

Details

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	06/05/2026
NVDNIST	4.0	10.0

CWE Weakness Classification

References (1)

Affected Products (2)

Impact	100.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	100.00