#iot
1 post tagged #iot.
CVE-2026-5857: Remote Code Execution in Contiki-NG’s MQTT Client
A malicious broker splits one PUBLISH across two TCP segments, skips a bounds check that is present and correct, and overwrites a function pointer.
1 post tagged #iot.
A malicious broker splits one PUBLISH across two TCP segments, skips a bounds check that is present and correct, and overwrites a function pointer.