CVE-2026-79389
Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the associated commands.
- Published Sep 4, 2026
- CVSS 7.4 high
- 0.2% chance of exploitation in the next 30 days (EPSS)