RA
Vendor
rabbitmq
94
CVEs
0
On KEV
7
New 30D
Products
RA10.0
rabbitmq-server
rabbitmq
71 CVEs0 on KEV3 new
AM9.5
amqp091-go
rabbitmq
12 CVEs0 on KEV1 new
RA8.7
rabbitmq-java-client
rabbitmq
10 CVEs0 on KEV3 new
JC9.8
Jms Client
Rabbitmq
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-67418 | RA rabbitmq-server rabbitmq | 5.3 | Oct 14 | RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers |
| CVE-2026-67414 | RA rabbitmq-server rabbitmq | 6.0 | Oct 14 | RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation |
| CVE-2026-67416 | RA rabbitmq-server rabbitmq | 5.3 | Oct 14 | RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation |
| CVE-2026-107386 | AM amqp091-go rabbitmq | 6.3 | Oct 8 | amqp091-go: Pre-negotiation frame limit is not enforced to 4KB |
| CVE-2026-106123 | RA rabbitmq-java-client rabbitmq | 5.5 | Oct 6 | RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() |
| CVE-2026-106122 | RA rabbitmq-java-client rabbitmq | 7.5 | Oct 6 | RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers |
| CVE-2026-106121 | RA rabbitmq-java-client rabbitmq | 7.5 | Oct 6 | RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS |
| CVE-2026-67420 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ OAuth credential refresh retains revoked runtime tags |
| CVE-2026-67419 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: Consecutive topic wildcards cause combinatorial routing work |
| CVE-2026-67421 | RA rabbitmq-server rabbitmq | 6.8 | Sep 25 | RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling |
| CVE-2026-67408 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service |
| CVE-2026-67406 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status |
| CVE-2026-67410 | RA rabbitmq-server rabbitmq | 7.1 | Sep 25 | RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint |
| CVE-2026-67227 | RA rabbitmq-server rabbitmq | 4.9 | Sep 25 | RabbitMQ: Atom exhaustion: to_atom on global-parameter :name |
| CVE-2026-67407 | RA rabbitmq-server rabbitmq | 7.1 | Sep 25 | RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass |
| CVE-2026-67226 | RA rabbitmq-server rabbitmq | 4.9 | Sep 25 | RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list |
| CVE-2026-67411 | RA rabbitmq-server rabbitmq | 7.1 | Sep 25 | RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass |
| CVE-2026-67413 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression |
| CVE-2026-61837 | RA rabbitmq-server rabbitmq | 5.3 | Sep 25 | RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks |
| CVE-2026-67415 | RA rabbitmq-server rabbitmq | 4.9 | Sep 25 | RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service |
| CVE-2026-67412 | RA rabbitmq-server rabbitmq | 7.1 | Sep 25 | RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access |
| CVE-2026-67409 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS |
| CVE-2026-67242 | RA rabbitmq-server rabbitmq | 5.4 | Sep 25 | RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp |
| CVE-2026-67223 | RA rabbitmq-server rabbitmq | 7.1 | Sep 25 | RabbitMQ: LDAP DN injection via unescaped substitution |
| CVE-2026-67239 | RA rabbitmq-server rabbitmq | 5.4 | Sep 25 | RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI |
| CVE-2026-67241 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check |
| CVE-2026-66071 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values |
| CVE-2026-66078 | RA rabbitmq-server rabbitmq | 5.5 | Sep 25 | RabbitMQ: protected tag bypass via bulk-delete |
| CVE-2026-66073 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: Atom table exhaustion via management API node field |
| CVE-2026-67237 | RA rabbitmq-server rabbitmq | 9.3 | Sep 25 | RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint |
| CVE-2026-67234 | RA rabbitmq-server rabbitmq | 4.3 | Sep 25 | RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference |
| CVE-2026-67225 | RA rabbitmq-server rabbitmq | 7.5 | Sep 25 | RabbitMQ: Stream-protocol frame length never validated against frame_max |
| CVE-2026-67230 | RA rabbitmq-server rabbitmq | 7.5 | Sep 25 | RabbitMQ: Web-STOMP unbounded pre-auth accumulation |
| CVE-2026-67222 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client |
| CVE-2026-67236 | RA rabbitmq-server rabbitmq | 6.5 | Sep 25 | RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login |
| CVE-2026-67233 | RA rabbitmq-server rabbitmq | 7.1 | Sep 24 | RabbitMQ: Monitoring-tag user can DELETE shovels |
| CVE-2026-67221 | RA rabbitmq-server rabbitmq | 4.9 | Sep 23 | RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords |
| CVE-2026-67231 | RA rabbitmq-server rabbitmq | 9.1 | Sep 23 | RabbitMQ: Trust-store whitelist by Issuer+Serial only |
| CVE-2026-67218 | RA rabbitmq-server rabbitmq | 6.5 | Sep 23 | RabbitMQ: Super-stream HTTP creation skips configure-permission check |
| CVE-2026-66074 | RA rabbitmq-server rabbitmq | 6.5 | Sep 23 | RabbitMQ: ReDoS via management API ?name= filter |
| CVE-2026-67232 | RA rabbitmq-server rabbitmq | 7.5 | Sep 23 | RabbitMQ: Web-MQTT decompression bomb |
| CVE-2026-67405 | RA rabbitmq-server rabbitmq | 8.1 | Sep 23 | RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation) |
| CVE-2026-66075 | RA rabbitmq-server rabbitmq | 5.4 | Sep 23 | RabbitMQ: Monitoring-tag user can restart federation links |
| CVE-2026-67219 | RA rabbitmq-server rabbitmq | 6.5 | Sep 23 | RabbitMQ: Consistent-hash exchange unbounded weight |
| CVE-2026-67228 | RA rabbitmq-server rabbitmq | 6.9 | Sep 23 | RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component |
| CVE-2026-67235 | RA rabbitmq-server rabbitmq | 6.5 | Sep 23 | RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size |
| CVE-2026-66068 | RA rabbitmq-server rabbitmq | 4.4 | Sep 23 | RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs |
| CVE-2026-67229 | RA rabbitmq-server rabbitmq | 4.9 | Sep 23 | RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata |
| CVE-2026-66080 | RA rabbitmq-server rabbitmq | 4.9 | Sep 23 | RabbitMQ: Super-stream partitions unbounded allocation |
| CVE-2026-67240 | RA rabbitmq-server rabbitmq | 2.3 | Sep 23 | RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard |
| CVE-2026-66072 | RA rabbitmq-server rabbitmq | 6.5 | Sep 23 | RabbitMQ: Atom table exhaustion via stream `chunk_selector` |
| CVE-2026-66067 | RA rabbitmq-server rabbitmq | 6.0 | Sep 23 | RabbitMQ: Stream protocol skips per vhost per user connection limits |
| CVE-2026-66069 | RA rabbitmq-server rabbitmq | 2.3 | Sep 23 | RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics |
| CVE-2026-67404 | RA rabbitmq-server rabbitmq | 7.4 | Sep 23 | RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch |
| CVE-2026-67220 | RA rabbitmq-server rabbitmq | 6.5 | Sep 23 | RabbitMQ: JMS topic exchange erl_scan atom exhaustion |
| CVE-2026-67224 | RA rabbitmq-server rabbitmq | 4.9 | Sep 23 | RabbitMQ: Admin path-traversal write via trace name |
| CVE-2026-66077 | RA rabbitmq-server rabbitmq | 6.1 | Sep 23 | RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI |
| CVE-2026-66079 | RA rabbitmq-server rabbitmq | 7.5 | Sep 23 | RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS |
| CVE-2026-66070 | RA rabbitmq-server rabbitmq | 8.8 | Sep 23 | RabbitMQ: CORS * reflects Origin with Allow-Credentials |
| CVE-2026-67238 | RA rabbitmq-server rabbitmq | 7.1 | Sep 23 | RabbitMQ: Atom-table exhaustion via reply-to queue name decoding |