CVE-2021-34432: Eclipse Mosquitto

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.

Affected products

• Eclipse Mosquitto: up to and including 2.0.7

Published 2021-07-27. Last modified 2026-07-02.