Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to 0.24.14, aio->prov_data is stored as nni_quic_conn* during dialing, but read as ex_quic_conn* during dialer close. This type confusion causes invalid object interpretation and leads to close-path hang/crash behavior. This vulnerability is fixed in 0.24.14.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-44640 Type Confusion Vulnerability in NanoMQ MQTT Broker Prior to 0.24.14 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44640
Post summary
The content announces the discovery of a type confusion vulnerability in NanoMQ MQTT Broker versions before 0.24.14, providing basic technical details but no exploitation or remediation information.
CVE-2026-44640 NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to 0.24.14, aio->prov_data is stored as nni_quic_conn* during dialing, but read as ex_quic… https://www.cve.org/CVERecord?id=CVE-2026-44640
Post summary
The text briefly discloses a mismatch bug in NanoMQ prior to version 0.24.14, indicating how connection data is stored and read incorrectly.