Vulnerabilities

TI-2026-47701 CVE-2026-67420

RabbitMQ OAuth credential refresh retains revoked runtime tags

MEDIUM 47

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

TI-2026-47700 CVE-2026-67419

RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2026-09-25 Partial fix · 4.3.5 CWE-1333

TI-2026-47702 CVE-2026-67421

RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

MEDIUM 54

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.5 Network Low privileges User interaction EPSS 0.0028 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

TI-2026-47693 CVE-2026-67408

RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00445 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +1 CWE-400

TI-2026-47691 CVE-2026-67406

Information disclosure in rabbitmq-server

LOW 21

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00343 Published 2026-09-25 Fixed in 4.3.3, 4.2.9 +2 CWE-200

TI-2026-47695 CVE-2026-67410

RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00408 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-200

TI-2026-47543 CVE-2026-67227

RabbitMQ: Atom exhaustion: to_atom on global-parameter :name

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00378 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +2 CWE-400

TI-2026-47692 CVE-2026-67407

Missing authorization in rabbitmq-server

LOW 23

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.1 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-862

TI-2026-47542 CVE-2026-67226

RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +1 CWE-400

TI-2026-47696 CVE-2026-67411

RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00318 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-863

TI-2026-47698 CVE-2026-67413

Regular expression denial of service in rabbitmq-server

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00491 Published 2026-09-25 Partial fix · 4.2.9, 4.1.14 +2 CWE-1333

TI-2026-44256 CVE-2026-61837

Improper authorization in rabbitmq-server

MEDIUM 61

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-285

TI-2026-47699 CVE-2026-67415

RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00383 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-400

TI-2026-47697 CVE-2026-67412

RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-862

TI-2026-47694 CVE-2026-67409

RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00418 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-252

TI-2026-47558 CVE-2026-67242

RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

HIGH 67

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-25 Partial fix · 4.2.9, 4.3.3 CWE-613

TI-2026-47539 CVE-2026-67223

RabbitMQ: LDAP DN injection via unescaped substitution

LOW 28

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00357 Published 2026-09-25 Partial fix · 3.13.18, 4.0.23 +3 CWE-90

TI-2026-47555 CVE-2026-67239

RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

LOW 34

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00154 Published 2026-09-25 Partial fix · 3.13.18, 4.0.23 +3 CWE-79

TI-2026-47557 CVE-2026-67241

RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check

MEDIUM 55

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.8 Network High privileges No interaction EPSS 0.00425 Published 2026-09-25 Fixed in 4.2.9, 4.3.3 CWE-862

TI-2026-47048 CVE-2026-66071

RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values

LOW 28

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00542 Published 2026-09-25 Partial fix · 3.13.15, 4.0.22 +3 CWE-400

TI-2026-47055 CVE-2026-66078

RabbitMQ: protected tag bypass via bulk-delete

MEDIUM 52

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.0043 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-862

TI-2026-47050 CVE-2026-66073

RabbitMQ: Atom table exhaustion via management API node field

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00471 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-400

TI-2026-47553 CVE-2026-67237

RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint

LOW 35

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00452 Published 2026-09-25 Partial fix · 4.2.8, 4.3.2 CWE-79

TI-2026-47550 CVE-2026-67234

RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference

LOW 12

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00425 Published 2026-09-25 Partial fix · 4.2.8, 4.3.2 CWE-20

TI-2026-47541 CVE-2026-67225

RabbitMQ: Stream-protocol frame length never validated against frame_max

LOW 28

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00343 Published 2026-09-25 Partial fix · 3.13.15, 4.0.20 +2 CWE-770

Vulnerabilities

Filters