Vulnerabilidades en rabbitmq
100 resultadosCVE-2026-67412MEDIUMRabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message accessEPSS 0.3%CVE-2026-67407MEDIUMRabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypassEPSS 0.3%CVE-2026-57213MEDIUMRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingEPSS 0.3%CVE-2026-106123MEDIUMRabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()EPSS 0.2%CVE-2026-67231CRITICALRabbitMQ: Trust-store whitelist by Issuer+Serial onlyEPSS 0.2%CVE-2026-66075LOWRabbitMQ: Monitoring-tag user can restart federation linksEPSS 0.2%CVE-2026-57214HIGHRabbitMQ: Stored XSS in RabbitMQ management UIEPSS 0.2%CVE-2025-50200MEDIUMRabbitMQ Node can log Basic Auth header from an HTTP requestEPSS 0.2%CVE-2025-30219MEDIUMRabbitMQ has XSS Vulnerability in an Error Message in Management UIEPSS 0.2%CVE-2026-44838MEDIUMRabbitMQ MQTT Topic Permission Authorization BypassEPSS 0.2%CVE-2026-67404CRITICALRabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchEPSS 0.2%CVE-2026-67221MEDIUMRabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwordsEPSS 0.2%CVE-2026-44839MEDIUMRabbitMQ: Unsanitized vhost names allow for XSS in management UIEPSS 0.2%CVE-2026-67236HIGHRabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /loginEPSS 0.2%CVE-2026-67239HIGHRabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UIEPSS 0.2%CVE-2026-66077HIGHRabbitMQ: Stored XSS via TLS peer-certificate DN in management UIEPSS 0.2%CVE-2026-66068MEDIUMRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIsEPSS 0.1%CVE-2026-77407HIGHRabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct FieldsEPSS 0.1%CVE-2026-67405MEDIUMRabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)EPSS 0.1%CVE-2026-77404HIGHRabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter InjectionEPSS 0.1%