Broadcom

Records874All Threatist records

Exploited (KEV)10In CISA KEV

CVSS critical152CVSS 9.0–10.0

CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30 TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records

Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

79 records in Rabbitmq Server · all components

TI-2026-41154 CVE-2026-57216

Improper authentication in rabbitmq-server

HIGH 76

RabbitMQ is a messaging and streaming broker.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00504 Published 2026-07-10 Fixed in 4.2.6, 4.1.11 +2 CWE-287

TI-2026-41149 CVE-2026-57211

RabbitMQ: UNC SSRF affecting the management UI on Windows

HIGH 76

RabbitMQ is a messaging and streaming broker.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00631 Published 2026-07-10 Fixed in 4.2.6, 4.1.11 CWE-36

TI-2026-41158 CVE-2026-57220

Resource allocation without limits in rabbitmq-server

HIGH 72

RabbitMQ is a messaging and streaming broker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00547 Published 2026-07-10 Fixed in 4.2.6 CWE-770

TI-2026-47695 CVE-2026-67410

RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00408 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-200

TI-2026-47694 CVE-2026-67409

RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00418 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-252

TI-2026-47558 CVE-2026-67242

RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

HIGH 67

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-25 Partial fix · 4.2.9, 4.3.3 CWE-613

TI-2026-47700 CVE-2026-67419

RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2026-09-25 Partial fix · 4.3.5 CWE-1333

TI-2026-47693 CVE-2026-67408

RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00445 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +1 CWE-400

TI-2026-47545 CVE-2026-67229

RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-400

TI-2026-47542 CVE-2026-67226

RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +1 CWE-400

TI-2026-41155 CVE-2026-57217

RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.00352 Published 2026-07-10 Fixed in 4.2.6, 4.1.11 +2 CWE-863

TI-2026-41152 CVE-2026-57214

RabbitMQ: Stored XSS in RabbitMQ management UI

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0022 Published 2026-07-10 Fixed in 4.2.5 CWE-79

TI-2026-41150 CVE-2026-57212

RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00433 Published 2026-07-10 Fixed in 4.2.5, 4.1.10 +2 CWE-770

TI-2026-44256 CVE-2026-61837

Improper authorization in rabbitmq-server

MEDIUM 61

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-285

TI-2026-47699 CVE-2026-67415

RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00383 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-400

TI-2026-47698 CVE-2026-67413

Regular expression denial of service in rabbitmq-server

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00491 Published 2026-09-25 Partial fix · 4.2.9, 4.1.14 +2 CWE-1333

TI-2026-47697 CVE-2026-67412

RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-862

TI-2026-47696 CVE-2026-67411

RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00318 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-863

TI-2026-47049 CVE-2026-66072

RabbitMQ: Atom table exhaustion via stream `chunk_selector`

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00473 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +3 CWE-400

TI-2026-41151 CVE-2026-57213

RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering

MEDIUM 59

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.7 Network High privileges User interaction EPSS 0.00252 Published 2026-07-10 Fixed in 4.2.5, 4.1.10 +2 CWE-79

TI-2026-41156 CVE-2026-57218

RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure

MEDIUM 56

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00352 Published 2026-07-10 Fixed in 4.2.6 CWE-863

TI-2026-47557 CVE-2026-67241

RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check

MEDIUM 55

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.8 Network High privileges No interaction EPSS 0.00425 Published 2026-09-25 Fixed in 4.2.9, 4.3.3 CWE-862

TI-2026-47702 CVE-2026-67421

RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

MEDIUM 54

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.5 Network Low privileges User interaction EPSS 0.0028 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

TI-2026-47055 CVE-2026-66078

RabbitMQ: protected tag bypass via bulk-delete

MEDIUM 52

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.0043 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-862

TI-2026-47701 CVE-2026-67420

RabbitMQ OAuth credential refresh retains revoked runtime tags

MEDIUM 47

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

Open these records in search →