CVE-2026-33217
NATS allows MQTT clients to bypass ACL checks
CVSS score
7.1
EPSS probability
%0.4
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2021-23450
Prototype Pollution
N
Patch verifiedEPSS %30
8.6
CVE-2024-21626
runc container breakout through process.cwd trickery and leaked fds
O
Patch verifiedEPSS %19
7.7
CVE-2020-5258
Prototype pollution in dojo
D
Patch verifiedEPSS %4
8.8
CVE-2026-88064
Backstage: Improper input validation in TechDocs MkDocs configuration
B
Patch verifiedEPSS %1
9.3
CVE-2026-33701
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
O
Patch verifiedEPSS %1
9.8
CVE-2026-29186
Unrestricted file upload in Linuxfoundation Backstage Plugin Techdocs Node
L
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-33217"