A one-line bug in libwebsockets MQTT parser allows pre-auth remote code execution. CVSS 8.1, but embedded update cycles mean devices stay exposed for months. #Cybersecurity https://deafnews.it/en/article/cve-2026-114550-rce-in-libwebsockets-mqtt-one-line-patch
DeafNewsCVE-2026-114550: RCE in libwebsockets MQTT, One-Line Patch | DeafNewsA single-line bug in the libwebsockets MQTT parser enables pre-authentication remote code execution with a CVSS 8.1 score, and slow embedded update cycles will keep devices exposed for months.