rabbitmq

Records101All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high34CVSS 7.0–8.9

Exploited now

rabbitmq records in CISA KEV

No rabbitmq vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jms Client 1 record MEDIUM

Records

101 records

TI-2026-41154 CVE-2026-57216

Improper authentication in rabbitmq-server

HIGH 76

RabbitMQ is a messaging and streaming broker.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00504 Published 2026-07-10 Fixed in 4.2.6, 4.1.11 +2 CWE-287

TI-2026-41149 CVE-2026-57211

RabbitMQ: UNC SSRF affecting the management UI on Windows

HIGH 76

RabbitMQ is a messaging and streaming broker.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00631 Published 2026-07-10 Fixed in 4.2.6, 4.1.11 CWE-36

TI-2026-41158 CVE-2026-57220

Resource allocation without limits in rabbitmq-server

HIGH 72

RabbitMQ is a messaging and streaming broker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00547 Published 2026-07-10 Fixed in 4.2.6 CWE-770

TI-2026-47695 CVE-2026-67410

RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00408 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-200

TI-2026-47694 CVE-2026-67409

RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00418 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-252

TI-2026-45167 CVE-2026-63337 · GHSA-6g32-pxv4-2wfj

RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

HIGH 68

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 4.0HIGH 7.5 Network Low privileges User interaction EPSS 0.00557 Published 2026-08-18 Fixed in 5.33.0 CWE-470

TI-2026-47558 CVE-2026-67242

RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

HIGH 67

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-25 Partial fix · 4.2.9, 4.3.3 CWE-613

TI-2026-68640 CVE-2026-106121 · GHSA-cqgh-8p3p-mx4m

RabbitMQ Java client JSON parser hangs on truncated input

HIGH 66

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2026-10-06 Partial fix · 5.36.1 CWE-835

TI-2023-24762 CVE-2023-46120 · GHSA-mm8h-8587-p46h

RabbitMQ Java client's lack of message size limitation leads to remote DoS attack

HIGH 66

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01336 Published 2023-10-24 Fixed in 5.18.0 CWE-400

TI-2026-47700 CVE-2026-67419

RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2026-09-25 Partial fix · 4.3.5 CWE-1333

TI-2026-47693 CVE-2026-67408

RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00445 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +1 CWE-400

TI-2026-47545 CVE-2026-67229

RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +2 CWE-400

TI-2026-47542 CVE-2026-67226

RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +1 CWE-400

TI-2026-41155 CVE-2026-57217

RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.00352 Published 2026-07-10 Fixed in 4.2.6, 4.1.11 +2 CWE-863

TI-2026-41152 CVE-2026-57214

RabbitMQ: Stored XSS in RabbitMQ management UI

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0022 Published 2026-07-10 Fixed in 4.2.5 CWE-79

TI-2026-41150 CVE-2026-57212

RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00433 Published 2026-07-10 Fixed in 4.2.5, 4.1.10 +2 CWE-770

TI-2026-45165 CVE-2026-63335 · GHSA-qx7j-jv8m-fppr

RabbitMQ Java client malformed body frame triggers raw command assembler exception

MEDIUM 61

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00515 Published 2026-08-18 Partial fix · 5.31.0 CWE-20

TI-2026-44256 CVE-2026-61837

Improper authorization in rabbitmq-server

MEDIUM 61

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-285

TI-2026-74164 CVE-2026-67414

RabbitMQ AMQP parser flaw lets clients exhaust broker memory

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00631 Published 2026-10-14 Partial fix · 4.0.24, 4.1.15 +2 CWE-400

TI-2026-68641 CVE-2026-106122 · GHSA-7822-rcf6-97fx

Malformed UTF-8 in RabbitMQ Java client permanently disables RPC consumers

MEDIUM 60

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00491 Published 2026-10-06 Partial fix · 5.36.0 CWE-172

TI-2026-47699 CVE-2026-67415

RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00383 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-400

TI-2026-47698 CVE-2026-67413

Regular expression denial of service in rabbitmq-server

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00491 Published 2026-09-25 Partial fix · 4.2.9, 4.1.14 +2 CWE-1333

TI-2026-47697 CVE-2026-67412

RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-862

TI-2026-47696 CVE-2026-67411

RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00318 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-863

TI-2026-47049 CVE-2026-66072

RabbitMQ: Atom table exhaustion via stream `chunk_selector`

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00473 Published 2026-09-23 Partial fix · 3.13.15, 4.0.20 +3 CWE-400

Open these records in search →