Skip to contentRabbitmq Rabbitmq-server vulnerabilities
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope valuesCVE-2026-66071Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: CORS * reflects Origin with Allow-CredentialsCVE-2026-66070Fix available7.6 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Monitoring-tag DELETE of auth-attempt metricsCVE-2026-66069Fix available2.3 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIsCVE-2026-66068Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream protocol skips per vhost per user connection limitsCVE-2026-66067Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checksCVE-2026-61837Fix available6.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCVE-2026-67413Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassCVE-2026-57217Fix available7.0 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged usersCVE-2026-57221Fix available5.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomCVE-2026-57215Fix available7.0 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurationsCVE-2026-57219Fix available8.7 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosureCVE-2026-57218Fix available4.9 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checksCVE-2026-57216Fix available6.8 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoSCVE-2026-57220Fix available7.5 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS in RabbitMQ management UICVE-2026-57214Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: UNC SSRF affecting the management UI on WindowsCVE-2026-57211Fix available6.5 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_sizeCVE-2026-57212Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingCVE-2026-57213Fix available5.7 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unsanitized vhost names allow for XSS in management UICVE-2026-44839Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ MQTT Topic Permission Authorization BypassCVE-2026-44838Fix available5.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ Node can log Basic Auth header from an HTTP requestCVE-2025-50200Fix available6.7 Medium
- rabbitmq rabbitmq-serverRabbitMQ has XSS Vulnerability in an Error Message in Management UICVE-2025-30219Fix available6.1 Medium
- rabbitmq rabbitmq-serverHTTP API's queue deletion endpoint does not verify that the user has a required permissionCVE-2024-51988Fix available6.5 Medium
- vmware rabbitmq, rabbitmq rabbitmq-server +1 moreDenial of Service by publishing large messages over the HTTP APICVE-2023-46118Fix available4.9 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq, broadcom rabbitmq server +2 morePredictable credential obfuscation seed value used in rabbitmq-serverCVE-2022-31008Fix available5.5 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management pluginCVE-2021-32719Fix available3.1 Low
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UICVE-2021-32718Fix available3.1 Low