Login Request a demo
RA
Product
rabbitmq-server
by rabbitmq · last CVE Oct 14, 2026
71
CVEs
0
On KEV
10.0
Max CVSS
3
New 30D
Vulnerabilities71In the news0Timeline
Severity mix
Critical 4High 20Medium 45Low 2
Severity
All severities71Critical4High20Medium45Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rabbitmq-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-67228
6.9
0%
Sep 23
RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component
Affected: >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1
CVE-2026-67421
6.8
0%
Sep 25
RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling
Affected: >= 3.13.0, < 3.13.19; >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.5
CVE-2026-67420
6.5
0%
Sep 25
RabbitMQ OAuth credential refresh retains revoked runtime tags
Affected: >= 3.13.0, < 3.13.19; >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.5
CVE-2026-67419
6.5
0%
Sep 25
RabbitMQ: Consecutive topic wildcards cause combinatorial routing work
Affected: < 4.3.5
CVE-2026-67408
6.5
0%
Sep 25
RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.11
CVE-2026-67406
6.5
0%
Sep 25
RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23
CVE-2026-67413
6.5
0%
Sep 25
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
Affected: >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.3.0, < 4.3.3; >= 4.0.0, < 4.0.23
CVE-2026-67409
6.5
0%
Sep 25
RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23; >= 3.13.0, < 3.13.18
CVE-2026-67241
6.5
0%
Sep 25
RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check
Affected: >= 4.2.0, < 4.2.9; >= 4.3.0, < 4.3.3
CVE-2026-66071
6.5
1%
Sep 25
RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1
CVE-2026-66073
6.5
0%
Sep 25
RabbitMQ: Atom table exhaustion via management API node field
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67222
6.5
0%
Sep 25
RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67236
6.5
0%
Sep 25
RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login
Affected: >= 4.2.0, < 4.2.8; >= 4.3.0, < 4.3.2
CVE-2026-67218
6.5
0%
Sep 23
RabbitMQ: Super-stream HTTP creation skips configure-permission check
Affected: >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-66074
6.5
0%
Sep 23
RabbitMQ: ReDoS via management API ?name= filter
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67219
6.5
0%
Sep 23
RabbitMQ: Consistent-hash exchange unbounded weight
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67235
6.5
0%
Sep 23
RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.20; >= 3.13.0, < 3.13.15
CVE-2026-66072
6.5
0%
Sep 23
RabbitMQ: Atom table exhaustion via stream `chunk_selector`
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1
CVE-2026-67220
6.5
0%
Sep 23
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-66076
6.5
0%
Sep 23
RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-57217
6.5
0%
Jul 10
RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.21; >= 3.13.0, < 3.13.15
CVE-2026-57218
6.5
0%
Jul 10
RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure
Affected: >= 4.2.0, < 4.2.6
CVE-2026-66077
6.1
0%
Sep 23
RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67414
6.0
1%
Oct 14
RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation
Affected: >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.4
CVE-2026-66067
6.0
0%
Sep 23
RabbitMQ: Stream protocol skips per vhost per user connection limits
Affected: >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1
CVE-2026-66078
5.5
0%
Sep 25
RabbitMQ: protected tag bypass via bulk-delete
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67242
5.4
0%
Sep 25
RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp
Affected: >= 4.2.0, < 4.2.9; >= 4.3.0, < 4.3.3
CVE-2026-67239
5.4
0%
Sep 25
RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI
Affected: >= 3.13.0, < 3.13.18; >= 4.0.0, < 4.0.23; >= 4.1.0, < 4.1.14; >= 4.2.0, < 4.2.9; >= 4.3.0, < 4.3.3
CVE-2026-66075
5.4
0%
Sep 23
RabbitMQ: Monitoring-tag user can restart federation links
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1
CVE-2026-57214
5.4
0%
Jul 10
RabbitMQ: Stored XSS in RabbitMQ management UI
Affected: >= 4.2.0, < 4.2.5
CVE-2026-67418
5.3
0%
Oct 14
RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers
Affected: >= 3.13.0, < 3.13.19; >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.5
CVE-2026-67416
5.3
1%
Oct 14
RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation
Affected: >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.4
CVE-2026-61837
5.3
0%
Sep 25
RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23
CVE-2026-57221
5.0
0%
Jul 10
RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users
Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.21; >= 3.13.0, < 3.13.15
CVE-2026-67227
4.9
0%
Sep 25
RabbitMQ: Atom exhaustion: to_atom on global-parameter :name
Affected: >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.14; >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1
CVE-2026-67226
4.9
0%
Sep 25
RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list
Affected: >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.14; >= 4.2.0, < 4.2.7
CVE-2026-67415
4.9
0%
Sep 25
RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service
Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9
CVE-2026-67221
4.9
0%
Sep 23
RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67229
4.9
0%
Sep 23
RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-66080
4.9
0%
Sep 23
RabbitMQ: Super-stream partitions unbounded allocation
Affected: >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67224
4.9
0%
Sep 23
RabbitMQ: Admin path-traversal write via trace name
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1
CVE-2026-57213
4.8
0%
Jul 10
RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering
Affected: >= 4.2.0, < 4.2.5; >= 4.1.0, < 4.1.10; >= 4.0.0, < 4.0.19; >= 3.13.0, < 3.13.14
CVE-2026-44839
4.8
0%
May 27
RabbitMQ: Unsanitized vhost names allow for XSS in management UI
Affected: >= 3.7.0, < 4.0.13; >= 4.1.0-alpha, < 4.1.2
CVE-2026-66068
4.4
0%
Sep 23
RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs
Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6
CVE-2026-67234
4.3
0%
Sep 25
RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference
Affected: >= 4.2.0, < 4.2.8; >= 4.3.0, < 4.3.2
Showing 45