CVE-2025-12790: Nicholas J Humfrey Ruby-Mqtt

High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack.

Affected products

• Nicholas J Humfrey Ruby-Mqtt: before 0.7.0 (fixed in 0.7.0)
• Red Hat Red Hat Satellite 6

Published 2025-11-06. Last modified 2026-06-17.