Vulnerabilities

TI-2026-74321 CVE-2026-67418

RabbitMQ MQTT 5 PUBLISH property disconnects matching subscribers

LOW 24

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2026-10-14 Partial fix · 3.13.19, 4.0.24 +3 CWE-1286

TI-2026-74164 CVE-2026-67414

RabbitMQ AMQP parser flaw lets clients exhaust broker memory

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00631 Published 2026-10-14 Partial fix · 4.0.24, 4.1.15 +2 CWE-400

TI-2026-74165 CVE-2026-67416

RabbitMQ symbolic body descriptor prefix collisions bypass AMQP validation

MEDIUM 57

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00621 Published 2026-10-14 Partial fix · 4.0.24, 4.1.15 +2 CWE-20

TI-2026-69701 CVE-2026-107386 · GHSA-w6r9-248c-frg8

Unbounded frame allocation in amqp091-go before connection tuning

LOW 29

amqp091-go is a Go AMQP 0.9.1 client.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00493 Published 2026-10-08 Partial fix · 1.14.0 CWE-770

TI-2026-68642 CVE-2026-106123 · GHSA-h6w7-qmcm-q6xr

RabbitMQ Java client leaks broker credentials in exception messages

LOW 25

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00239 Published 2026-10-06 Partial fix · 5.35.0 CWE-209

TI-2026-68641 CVE-2026-106122 · GHSA-7822-rcf6-97fx

Malformed UTF-8 in RabbitMQ Java client permanently disables RPC consumers

MEDIUM 60

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00491 Published 2026-10-06 Partial fix · 5.36.0 CWE-172

TI-2026-68640 CVE-2026-106121 · GHSA-cqgh-8p3p-mx4m

RabbitMQ Java client JSON parser hangs on truncated input

HIGH 66

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2026-10-06 Partial fix · 5.36.1 CWE-835

TI-2026-47701 CVE-2026-67420

RabbitMQ OAuth credential refresh retains revoked runtime tags

MEDIUM 47

RabbitMQ is a messaging and streaming broker.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

TI-2026-47700 CVE-2026-67419

RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2026-09-25 Partial fix · 4.3.5 CWE-1333

TI-2026-47702 CVE-2026-67421

RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

MEDIUM 54

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.5 Network Low privileges User interaction EPSS 0.0028 Published 2026-09-25 Partial fix · 3.13.19, 4.0.24 +3 CWE-862

TI-2026-47693 CVE-2026-67408

RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00445 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +1 CWE-400

TI-2026-47691 CVE-2026-67406

Information disclosure in rabbitmq-server

LOW 21

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00343 Published 2026-09-25 Fixed in 4.3.3, 4.2.9 +2 CWE-200

TI-2026-47695 CVE-2026-67410

RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00408 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-200

TI-2026-47543 CVE-2026-67227

RabbitMQ: Atom exhaustion: to_atom on global-parameter :name

LOW 27

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00378 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +2 CWE-400

TI-2026-47692 CVE-2026-67407

Missing authorization in rabbitmq-server

LOW 23

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.1 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-862

TI-2026-47542 CVE-2026-67226

RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list

MEDIUM 64

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00389 Published 2026-09-25 Partial fix · 4.0.22, 4.1.14 +1 CWE-400

TI-2026-47696 CVE-2026-67411

RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00318 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-863

TI-2026-47698 CVE-2026-67413

Regular expression denial of service in rabbitmq-server

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00491 Published 2026-09-25 Partial fix · 4.2.9, 4.1.14 +2 CWE-1333

TI-2026-44256 CVE-2026-61837

Improper authorization in rabbitmq-server

MEDIUM 61

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +2 CWE-285

TI-2026-47699 CVE-2026-67415

RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00383 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 CWE-400

TI-2026-47697 CVE-2026-67412

RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

MEDIUM 60

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00263 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-862

TI-2026-47694 CVE-2026-67409

RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS

HIGH 69

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00418 Published 2026-09-25 Partial fix · 4.3.3, 4.2.9 +3 CWE-252

TI-2026-47558 CVE-2026-67242

RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

HIGH 67

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-25 Partial fix · 4.2.9, 4.3.3 CWE-613

TI-2026-47539 CVE-2026-67223

RabbitMQ: LDAP DN injection via unescaped substitution

LOW 28

RabbitMQ is a messaging and streaming broker.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00357 Published 2026-09-25 Partial fix · 3.13.18, 4.0.23 +3 CWE-90

TI-2026-47555 CVE-2026-67239

RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

LOW 34

RabbitMQ is a messaging and streaming broker.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00154 Published 2026-09-25 Partial fix · 3.13.18, 4.0.23 +3 CWE-79

Vulnerabilities

Filters