Chirpstack - vulnerabilities (CVEs)

3 CVEs in 6 products, 0 in the last 30 days, newest from 2026-08-05.

Products

• Chirpstack - 1 CVEs
• Gateway-bridge - 1 CVEs
• Gateway Bridge - 1 CVEs
• Mqtt-forwarder - 1 CVEs
• Mqtt Forwarder - 1 CVEs
• Network Server - 1 CVEs

Newest CVEs of Chirpstack

• CVE-2026-71282 - CVSS 6.5 (medium), 2026-08-05: ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY…
• CVE-2024-29862 - CVSS 7.5 (high), 2024-03-21: The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when…
• CVE-2020-28349 - CVSS 6.5 (medium), 2020-11-09: An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed…