CVE-2026-114550 — libwebsockets MQTT Protocol PUBACK Vulnerability

60/100

libwebsockets contains an MQTT protocol vulnerability that could allow remote code execution, though no exploit is currently reported.

Digest of 2026-10-27

Sources

• Zero Day Initiative — published advisories — ZDI-26-792: libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability