Question 1

What is CVE-2026-103906 — CVE-2026-103906?

Accepted Answer

Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT broker and access data or perform actions across tenant boundaries.

Question 2

What is the authoritative source for CVE-2026-103906?

Accepted Answer

CVE-2026-103906 (CVE-2026-103906) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-103906CVE-2026-103906

Description

Scoring