RA
Product
rabbitmq-server
75
CVEs
0
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 4High 20Medium 49Low 2
Watch
Add rabbitmq-server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-66067 | 6.0 | Sep 23 | RabbitMQ: Stream protocol skips per vhost per user connection limits Affected: >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1 |
| CVE-2026-66078 | 5.5 | Sep 25 | RabbitMQ: protected tag bypass via bulk-delete Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6 |
| CVE-2025-50200 | 5.5 | Jun 19 | RabbitMQ Node can log Basic Auth header from an HTTP request Affected: <= 3.13.7 |
| CVE-2026-67242 | 5.4 | Sep 25 | RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp Affected: >= 4.2.0, < 4.2.9; >= 4.3.0, < 4.3.3 |
| CVE-2026-67239 | 5.4 | Sep 25 | RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI Affected: >= 3.13.0, < 3.13.18; >= 4.0.0, < 4.0.23; >= 4.1.0, < 4.1.14; >= 4.2.0, < 4.2.9; >= 4.3.0, < 4.3.3 |
| CVE-2026-66075 | 5.4 | Sep 23 | RabbitMQ: Monitoring-tag user can restart federation links Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1 |
| CVE-2026-57214 | 5.4 | Jul 10 | RabbitMQ: Stored XSS in RabbitMQ management UI Affected: >= 4.2.0, < 4.2.5 |
| CVE-2026-67418 | 5.3 | Oct 14 | RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers Affected: >= 3.13.0, < 3.13.19; >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.5 |
| CVE-2026-67416 | 5.3 | Oct 14 | RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation Affected: >= 4.0.0, < 4.0.24; >= 4.1.0, < 4.1.15; >= 4.2.0, < 4.2.10; >= 4.3.0, < 4.3.4 |
| CVE-2026-61837 | 5.3 | Sep 25 | RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9; >= 4.1.0, < 4.1.14; >= 4.0.0, < 4.0.23 |
| CVE-2026-57221 | 5.0 | Jul 10 | RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users Affected: >= 4.2.0, < 4.2.6; >= 4.1.0, < 4.1.11; >= 4.0.0, < 4.0.21; >= 3.13.0, < 3.13.15 |
| CVE-2026-67227 | 4.9 | Sep 25 | RabbitMQ: Atom exhaustion: to_atom on global-parameter :name Affected: >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.14; >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1 |
| CVE-2026-67226 | 4.9 | Sep 25 | RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list Affected: >= 4.0.0, < 4.0.22; >= 4.1.0, < 4.1.14; >= 4.2.0, < 4.2.7 |
| CVE-2026-67415 | 4.9 | Sep 25 | RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service Affected: >= 4.3.0, < 4.3.3; >= 4.2.0, < 4.2.9 |
| CVE-2026-67221 | 4.9 | Sep 23 | RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6 |
| CVE-2026-67229 | 4.9 | Sep 23 | RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6 |
| CVE-2026-66080 | 4.9 | Sep 23 | RabbitMQ: Super-stream partitions unbounded allocation Affected: >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6 |
| CVE-2026-67224 | 4.9 | Sep 23 | RabbitMQ: Admin path-traversal write via trace name Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6; >= 4.3.0, < 4.3.1 |
| CVE-2023-46118 | 4.9 | Oct 24 | Denial of Service by publishing large messages over the HTTP API Affected: < 3.12.7; < 3.11.24 |
| CVE-2026-57213 | 4.8 | Jul 10 | RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering Affected: >= 4.2.0, < 4.2.5; >= 4.1.0, < 4.1.10; >= 4.0.0, < 4.0.19; >= 3.13.0, < 3.13.14 |
| CVE-2026-44839 | 4.8 | May 27 | RabbitMQ: Unsanitized vhost names allow for XSS in management UI Affected: >= 3.7.0, < 4.0.13; >= 4.1.0-alpha, < 4.1.2 |
| CVE-2026-66068 | 4.4 | Sep 23 | RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs Affected: >= 3.13.0, < 3.13.15; >= 4.0.0, < 4.0.20; >= 4.1.0, < 4.1.11; >= 4.2.0, < 4.2.6 |
| CVE-2026-67234 | 4.3 | Sep 25 | RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference Affected: >= 4.2.0, < 4.2.8; >= 4.3.0, < 4.3.2 |
| CVE-2026-67240 | 2.3 | Sep 23 | RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard Affected: >= 4.2.0, < 4.2.7; >= 4.3.0, < 4.3.1 |
| CVE-2026-66069 | 2.3 | Sep 23 | RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics Affected: >= 4.1.0, < 4.1.13; >= 4.2.0, < 4.2.7 |