rabbitmq rabbitmq-server

• CVE-2026-67220 Medium 6.0 RabbitMQ: JMS topic exchange erl_scan atom exhaustion 0.3%
• CVE-2026-67224 Low 2.1 RabbitMQ: Admin path-traversal write via trace name 0.4%
• CVE-2026-66077 High 7.3 RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI 0.2%
• CVE-2026-66079 High 8.2 RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS 0.3%
• CVE-2026-66070 High 7.6 RabbitMQ: CORS * reflects Origin with Allow-Credentials 0.4%
• CVE-2026-67238 High 7.1 RabbitMQ: Atom-table exhaustion via reply-to queue name decoding 0.4%
• CVE-2026-66076 Low 2.3 RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure 0.3%
• CVE-2026-57217 High 7.0 RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass 0.4%
• CVE-2026-57221 Medium 5.3 RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users 0.4%
• CVE-2026-57215 High 7.0 RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom 0.4%
• CVE-2026-57219 High 8.7 RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations 2.8%
• CVE-2026-57218 Medium 4.9 RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure 0.4%
• CVE-2026-57216 Medium 6.8 RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks 0.5%
• CVE-2026-57220 High 7.5 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS 0.5%
• CVE-2026-57214 High 7.1 RabbitMQ: Stored XSS in RabbitMQ management UI 0.2%
• CVE-2026-57211 Medium 6.5 RabbitMQ: UNC SSRF affecting the management UI on Windows 0.6%
• CVE-2026-57212 High 7.1 RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size 0.4%
• CVE-2026-57213 Medium 5.7 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering 0.3%
• CVE-2026-44839 Medium 5.6 RabbitMQ: Unsanitized vhost names allow for XSS in management UI 0.2%
• CVE-2026-44838 Medium 5.3 RabbitMQ MQTT Topic Permission Authorization Bypass 0.2%
• CVE-2025-50200 Medium 6.7 RabbitMQ Node can log Basic Auth header from an HTTP request 0.2%
• CVE-2025-30219 Medium 6.1 RabbitMQ has XSS Vulnerability in an Error Message in Management UI 0.2%
• CVE-2024-51988 Medium 6.5 HTTP API's queue deletion endpoint does not verify that the user has a required permission 0.4%
• CVE-2023-46118 Medium 4.9 Denial of Service by publishing large messages over the HTTP API 1.3%
• CVE-2022-31008 Medium 5.5 Predictable credential obfuscation seed value used in rabbitmq-server 0.4%
• CVE-2021-32719 Low 3.1 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management plugin 1.4%
• CVE-2021-32718 Low 3.1 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI 1.4%