CVE-2026-79391

Description

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations.

References

• https://github.com/EmbdCDACHyd/CVE/blob/main/CVE-2026-79391/README.md