DeutschShown in its original language — a full translation is planned for a future version.
NATS Server: Mehrere Schwachstellen
view advisory published 2026-03-24
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NATS Server ausnutzen, um Informationen offenzulegen oder zu manipulieren, einen Denial-of-Service zu verursachen und Sicherheitsmechanismen zu umgehen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33249US | —OT elevated | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.11.0 and prior to versions 2.11.15 and 2.12.6, a valid client… | ||||
| CVE-2026-33248US | — | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with `ver… | ||||
| CVE-2026-33223US | medium5.4 | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, the NATS message header `Nats-Request-Info:` i… | ||||
| CVE-2026-33222US | — | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, users with JetStream admin API access to resto… | ||||
| CVE-2026-33247US | medium5.3 | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credential… | ||||
| CVE-2026-33246US | medium5.4 | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server offers a `Nats-Request-Info:` message header, providing information… | ||||
| CVE-2026-33219US | — | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, a malicious client which can connect to the We… | ||||
| CVE-2026-33218US | — | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, a client which can connect to the leafnode por… | ||||
| CVE-2026-33217US | medium6.5OT elevated | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using ACLs on message subjects, these ACL… | ||||
| CVE-2026-33216US | high7.5 | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords… | ||||
| CVE-2026-33215US | medium6.5 | — | ||
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server provides an MQTT client interface. Prior to versions 2.11.15 and 2.1… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:22347 vom 2026-06-02external
- NATS Security Advisory 2026-05 vom 2026-03-24external
- NATS Security Advisory 2026-06 vom 2026-03-24external
- NATS Security Advisory 2026-07 vom 2026-03-24external
- NATS Security Advisory 2026-08 vom 2026-03-24external
- NATS Security Advisory 2026-09 vom 2026-03-24external
- NATS Security Advisory 2026-10 vom 2026-03-24external
- NATS Security Advisory 2026-11 vom 2026-03-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan