{"action":"Upgrade io.moquette:moquette-broker to 0.18.1 or later.","affected":[{"fixed":"0.18.1","introduced":"0"}],"component":"io.moquette:moquette-broker","cve_ids":["CVE-2026-85058"],"ecosystem":"Maven","epss":0.00575,"exploited":false,"fixed_versions":["0.18.1"],"ghsa_id":"GHSA-9jjc-fw8x-fmwx","id":"tcs_01M5N8Q7R1ZA03WZW6R0W7TG8W","modified_at":"2026-09-18T18:15:06.665588978Z","published_at":"2026-09-18T17:58:39Z","references":["https://osv.dev/vulnerability/GHSA-9jjc-fw8x-fmwx","https://github.com/moquette-io/moquette/security/advisories/GHSA-9jjc-fw8x-fmwx","https://github.com/moquette-io/moquette/commit/e23df019f6a11e22c7d2047d4f86d07095466c97","https://github.com/moquette-io/moquette/commit/f5a323fe782d1505c0097498cb22eb6ec6c96973","https://github.com/moquette-io/moquette","https://github.com/moquette-io/moquette/releases/tag/v0.18.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9jjc-fw8x-fmwx","url":"https://osv.dev/vulnerability/GHSA-9jjc-fw8x-fmwx"}],"summary":"io.moquette:moquette-broker has a Missing Authorization issue"}