Mqttsnet vulnerabilities
We track 2 vulnerabilities in Mqttsnet products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
2vulnerabilities
2critical
0high
0exploited
9.5average CVSS score
Latest Mqttsnet vulnerabilities
- 9.9 Critical severity
thinglinks: Improper Neutralization of Special Elements used in an OS Command
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and passes it to an unsandboxed `Groovy compilation and loading` flow. An authenticated attacker can provide c
- 9.1 Critical severity
thinglinks: Improper Neutralization of Special Elements used in an SQL Command
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS APIs` allows request-controlled JSON field values submitted to `/anyUser/tds/insertTableData` to reach unsafe SQL construction in the