# Vulnerability Discovery

> Guides for finding MQTT auth flaws, weak creds, and plaintext transport

- **URL:** https://hackindex.io/services/mqtt/vulnerability-discovery
- **Service:** [MQTT](https://hackindex.io/services/mqtt.md)
- **Published:** 2026-03-16
- **Updated:** 2026-03-29

MQTT vulnerability discovery focuses on authentication gaps, transport security, and access control weaknesses. Many brokers ship with anonymous access enabled by default, allowing anyone to subscribe and publish to all topics.

Check for missing TLS on port 1883, weak or absent ACLs on sensitive topics, and exposed management interfaces. Brokers running outdated versions may carry known CVEs that allow denial of service or authentication bypass.

## Guides

- [MQTT Plaintext Transport Detection](https://hackindex.io/services/mqtt/vulnerability-discovery/mqtt-plaintext-transport.md)
- [MQTT Unauthenticated Access](https://hackindex.io/services/mqtt/vulnerability-discovery/mqtt-unauthenticated-access.md)
- [MQTT Weak and Default Credential Check](https://hackindex.io/services/mqtt/vulnerability-discovery/mqtt-weak-credentials.md)