#contiki-ng

CVE-2026-5857: Remote Code Execution in Contiki-NG’s MQTT Client

A malicious broker splits one PUBLISH across two TCP segments, skips a bounds check that is present and correct, and overwrites a function pointer.