Vulnerabilities in rabbitmq
100 resultsCVE-2026-57218MEDIUMRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosureEPSS 0.4%CVE-2026-67242MEDIUMRabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float expEPSS 0.3%CVE-2026-67225MEDIUMRabbitMQ: Stream-protocol frame length never validated against frame_maxEPSS 0.3%CVE-2026-67406MEDIUMRabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_statusEPSS 0.3%CVE-2026-66076LOWRabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosureEPSS 0.3%CVE-2026-67222MEDIUMRabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_clientEPSS 0.3%CVE-2026-66079HIGHRabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSEPSS 0.3%CVE-2026-67411MEDIUMRabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypassEPSS 0.3%CVE-2026-66080MEDIUMRabbitMQ: Super-stream partitions unbounded allocationEPSS 0.3%CVE-2026-67228MEDIUMRabbitMQ: Atom exhaustion: to_atom on runtime-parameter componentEPSS 0.3%CVE-2026-67220MEDIUMRabbitMQ: JMS topic exchange erl_scan atom exhaustionEPSS 0.3%CVE-2026-63336MEDIUMRabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITMEPSS 0.3%CVE-2026-66069LOWRabbitMQ: Monitoring-tag DELETE of auth-attempt metricsEPSS 0.3%CVE-2026-67235HIGHRabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizeEPSS 0.3%CVE-2026-67219MEDIUMRabbitMQ: Consistent-hash exchange unbounded weightEPSS 0.3%CVE-2026-67233MEDIUMRabbitMQ: Monitoring-tag user can DELETE shovelsEPSS 0.3%CVE-2026-61837MEDIUMRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checksEPSS 0.3%CVE-2026-77405CRITICALRabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI ParserEPSS 0.3%CVE-2026-67421MEDIUMRabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error HandlingEPSS 0.3%CVE-2026-67420LOWRabbitMQ OAuth credential refresh retains revoked runtime tagsEPSS 0.3%