CVE-2026-8741

Katalog CVE

CVSS 3.1 · Low EPSS 0,39%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada emqx. Skor CVSS 3.1 3.1 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability has been found in EMQX up to 6.2.0. This affects an unknown function of the file apps/emqx/src/emqx_persistent_session_ds.erl of the component QoS 2 PUBLISH Packet Handler. Such manipulation leads to race condition. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is reported as difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.

Rincian

Terbit di NVD

17 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.1 (Low), sumber vuldb.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Pathfind-tama/Report_EMQX_MQTT/blob/main/MQTT%20QoS%202%20Message%20Duplication%20in%20Pers... exploit · mitigasi · advisory pihak ketiga
• https://github.com/Pathfind-tama/Report_EMQX_MQTT advisory pihak ketiga
• https://vuldb.com/submit/809931 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/364329 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/364329/cti permissions required · vdb entry