Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://github.com/EmbdCDACHyd/CVE/tree/main/CVE-2026-79389 |
|
Fri, 04 Sep 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Replay-based Command Injection via MQTT in Trueview T18161 Device | |
| Weaknesses | CWE-285 |
Fri, 04 Sep 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the associated commands. | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-09-04T19:56:41.996Z
Reserved: 2026-08-25T00:00:00.000Z
Link: CVE-2026-79389
No data.
Status : Received
Published: 2026-09-04T20:17:28.133
Modified: 2026-09-04T20:17:28.133
Link: CVE-2026-79389
No data.
OpenCVE Enrichment
Updated: 2026-09-04T22:00:06Z