{"id":"CVE-2026-103906","published":"2026-11-09T17:17:06.787","lastModified":"2026-11-09T18:17:18.663","description":"Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT broker and access data or perform actions across tenant boundaries.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-798"],"vendors":[],"products":[],"references":[{"url":"https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-103906.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-103906.md","tags":[]}],"hasPoc":true,"ai":null}