CVE-2026-103906:詳細資料

CVE-2026-103906

2026-11-09
17h17 +00:00
A07-Identif. and Authent. Fail
2026-11-09
18h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT broker and access data or perform actions across tenant boundaries.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

參考資料