https://born0monday.me/tags/rce/ Recent content in Rce on born0monday Hugo en Wed, 04 Nov 2026 08:00:00 +0100 https://born0monday.me/posts/ha-green-mosquitto-rce/ Wed, 04 Nov 2026 00:00:00 +0000 https://born0monday.me/posts/ha-green-mosquitto-rce/ <p>In this writeup I&rsquo;m going to demonstrate that a seemingly benign bug in Eclipse Mosquitto, publicly disclosed back in August 2026 and still unpatched upstream, can in fact be exploited to gain unauthenticated (pre-auth) RCE. The GitHub issue<sup id="fnref:1"><a href="#fn:1" class="footnote-ref" role="doc-noteref">1</a></sup> incorrectly concluded that the bug has no impact on memory safety. I had found the flaw independently about a week earlier while researching the Home Assistant Green for Pwn2Own Ireland 2026<sup id="fnref:2"><a href="#fn:2" class="footnote-ref" role="doc-noteref">2</a></sup>, but the public disclosure made it ineligible for the competition. This writeup also includes advisory information for affected users. See the Affected section below.</p>