Login Request a demo
RA
Product
rabbitmq-server
by rabbitmq · last CVE Oct 14, 2026
71
CVEs
0
On KEV
10.0
Max CVSS
3
New 30D
Vulnerabilities71In the news0Timeline
Severity mix
Critical 4High 20Medium 45Low 2
Severity
All severities71Critical4High20Medium45Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rabbitmq-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57216
10.0
1%
Jul 10
RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.21; >= 3.13.0, < 3.13.15
CVE-2026-57211
10.0
1%
Jul 10
RabbitMQ: UNC SSRF affecting the management UI on Windows
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11
CVE-2026-67237
9.3
0%
Sep 25
RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint
Affected: >= 4.2.0, < 4.2.8; >= 4.3.0, < 4.3.2
CVE-2026-67231
9.1
0%
Sep 23
RabbitMQ: Trust-store whitelist by Issuer+Serial only
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-66070
8.8
0%
Sep 23
RabbitMQ: CORS * reflects Origin with Allow-Credentials
Affected: >= 3.13.0, < 3.13.17; >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.13; >= 4.2.0, < 4.2.6
CVE-2026-57215
8.8
0%
Jul 10
RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.21; >= 3.13.0, < 3.13.15
CVE-2026-67405
8.1
0%
Sep 23
RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-44838
8.1
0%
May 27
RabbitMQ MQTT Topic Permission Authorization Bypass
Affected: >= 4.2.0, < 4.2.4
CVE-2026-57212
7.7
0%
Jul 10
RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size
Affected: >= 4.2.0, < 4.2.5; >= 4.1.0, < 4.1.10; >= 4.0.0, < 4.0.19; >= 3.13.0, < 3.13.14
CVE-2026-67225
7.5
0%
Sep 25
RabbitMQ: Stream-protocol frame length never validated against frame_max
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67230
7.5
1%
Sep 25
RabbitMQ: Web-STOMP unbounded pre-auth accumulation
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.20; >= 3.13.0, < 3.13.15
CVE-2026-67232
7.5
0%
Sep 23
RabbitMQ: Web-MQTT decompression bomb
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-66079
7.5
0%
Sep 23
RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-57219
7.5
3%
Jul 10
RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.21; >= 3.13.0, < 3.13.15
CVE-2026-57220
7.5
1%
Jul 10
RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS
Affected: >= 4.2.0, < 4.2.6
CVE-2022-31008
7.5
0%
Oct 6
Predictable credential obfuscation seed value used in rabbitmq-server
Affected: < 3.8.32; >= 3.9.0, < 3.9.18; >= 3.10.0, < 3.10.2
CVE-2026-67404
7.4
0%
Sep 23
RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67410
7.1
0%
Sep 25
RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9
CVE-2026-67407
7.1
0%
Sep 25
RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass
Affected: >= 4.3.2, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23
CVE-2026-67411
7.1
0%
Sep 25
RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23; >= 3.13.0, < 3.13.18
CVE-2026-67412
7.1
0%
Sep 25
RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.24; >= 3.13.0, < 3.13.18
CVE-2026-67223
7.1
0%
Sep 25
RabbitMQ: LDAP DN injection via unescaped substitution
Affected: >= 3.13.0, < 3.13.18; >= 4.0.0, < 4.0.23; >= 4.1.0, < 4.1.14; >= 4.2.0, < 4.2.9; >= 4.3.0, < 4.3.3
CVE-2026-67233
7.1
0%
Sep 24
RabbitMQ: Monitoring-tag user can DELETE shovels
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1
CVE-2026-67238
7.1
0%
Sep 23
RabbitMQ: Atom-table exhaustion via reply-to queue name decoding
Affected: >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1
CVE-2026-67228
6.9
0%
Sep 23
RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component
Affected: >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1
CVE-2026-67421
6.8
0%
Sep 25
RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling
Affected: >= 3.13.0, < 3.13.19; >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.5
CVE-2026-67420
6.5
0%
Sep 25
RabbitMQ OAuth credential refresh retains revoked runtime tags
Affected: >= 3.13.0, < 3.13.19; >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.5
CVE-2026-67419
6.5
0%
Sep 25
RabbitMQ: Consecutive topic wildcards cause combinatorial routing work
Affected: < 4.3.5
CVE-2026-67408
6.5
0%
Sep 25
RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.11
CVE-2026-67406
6.5
0%
Sep 25
RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23
CVE-2026-67413
6.5
0%
Sep 25
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
Affected: >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.3.0, < 4.3.3; >= 4.0.0, < 4.0.23
CVE-2026-67409
6.5
0%
Sep 25
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23; >= 3.13.0, < 3.13.18
CVE-2026-67241
6.5
0%
Sep 25
RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check
Affected: >= 4.2.0, < 4.2.9; >= 4.3.0, < 4.3.3
CVE-2026-66071
6.5
1%
Sep 25
RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1
CVE-2026-66073
6.5
0%
Sep 25
RabbitMQ: Atom table exhaustion via management API node field
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67222
6.5
0%
Sep 25
RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67236
6.5
0%
Sep 25
RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login
Affected: >= 4.2.0, < 4.2.8; >= 4.3.0, < 4.3.2
CVE-2026-67218
6.5
0%
Sep 23
RabbitMQ: Super-stream HTTP creation skips configure-permission check
Affected: >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-66074
6.5
0%
Sep 23
RabbitMQ: ReDoS via management API ?name= filter
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67219
6.5
0%
Sep 23
RabbitMQ: Consistent-hash exchange unbounded weight
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67235
6.5
0%
Sep 23
RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.20; >= 3.13.0, < 3.13.15
CVE-2026-66072
6.5
0%
Sep 23
RabbitMQ: Atom table exhaustion via stream `chunk_selector`
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1
CVE-2026-67220
6.5
0%
Sep 23
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-66076
6.5
0%
Sep 23
RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-57217
6.5
0%
Jul 10
RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.21; >= 3.13.0, < 3.13.15
CVE-2026-57218
6.5
0%
Jul 10
RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure
Affected: >= 4.2.0, < 4.2.6
CVE-2026-66077
6.1
0%
Sep 23
RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67414
6.0
1%
Oct 14
RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation
Affected: >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.4
CVE-2026-66067
6.0
0%
Sep 23
RabbitMQ: Stream protocol skips per vhost per user connection limits
Affected: >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1
CVE-2026-66078
5.5
0%
Sep 25
RabbitMQ: protected tag bypass via bulk-delete
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
Page 1 of 2 · 71 total
12