CVE-2026-45151— NanoMQ: NULL Pointer Dereference
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-45151
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NanoMQ: NULL Pointer Dereference
Source: NVD (National Vulnerability Database)
Vulnerability Description
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In 0.24.8 and earlier, quic_stream_recv can dereference a null substream pointer when a substream is in reopen state. The code finishes the AIO with error but does not return before locking c->mtx.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
空指针解引用
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-45151
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45151
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-45151 (1)
IV. Related Vulnerabilities
Same product: nanomq
- CVE-2026-44640
NanoMQ: QUIC Dialer Close Type Confusion - CVE-2026-32134
NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer - CVE-2026-32135
NanoMQ has Heap Buffer Overflow in URI Parameter Parsing - CVE-2026-34608
nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_P - CVE-2026-32696
NanoMQ HTTP Auth: Missing username/password can trigger a NU
Same vendor: nanomq
- CVE-2026-44640
NanoMQ: QUIC Dialer Close Type Confusion - CVE-2026-32134
NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer - CVE-2026-32135
NanoMQ has Heap Buffer Overflow in URI Parameter Parsing - CVE-2026-34608
nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_P - CVE-2026-32696
NanoMQ HTTP Auth: Missing username/password can trigger a NU
Same weakness: CWE-476
- CVE-2026-46527
cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy - CVE-2026-47337
NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 - CVE-2026-47335
NULL pointer dereference in Ubuntu Linux AppArmor notificati - CVE-2026-47327
NULL pointer dereference in Ubuntu Linux AppArmor notificati - CVE-2026-44710
pam_usb: NULL pointer dereference from UDisks device fields
V. Comments for CVE-2026-45151
No comments yet