DeutschShown in its original language — a full translation is planned for a future version.
NATS Server: Mehrere Schwachstellen
view advisory published 2026-06-29
Ein Angreifer kann mehrere Schwachstellen in NATS Server ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-58211US | —OT elevated | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client could be registered as the configured no_aut… | ||||
| CVE-2026-58208US | high7.5 | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQT… | ||||
| CVE-2026-58207US | medium6.5 | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client able to send account-scoped connection monit… | ||||
| CVE-2026-58254US | medium6.5OT elevated | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.8, message trace destination checks were applied to ordin… | ||||
| CVE-2026-58253US | — | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser f… | ||||
| CVE-2026-58252US | — | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user could receive messages… | ||||
| CVE-2026-58251US | — | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user with subscription deny… | ||||
| CVE-2026-58250US | — | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leaf… | ||||
| CVE-2026-58214US | —OT elevated | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to the i… | ||||
| CVE-2026-58213US | — | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control characte… | ||||
| CVE-2026-58210US | — | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an unauthenticated MQTT client could cause the server… | ||||
| CVE-2026-58209US | —OT elevated | — | ||
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, MQTT retained message delivery and QoS1+ durable repl… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-38x3-76xf-cq45 vom 2026-06-29external
- GitHub Security Advisory GHSA-7qmq-8cc4-hxwg vom 2026-06-29external
- GitHub Security Advisory GHSA-g33f-6538-grxh vom 2026-06-29external
- GitHub Security Advisory GHSA-hmmp-q8cx-v964 vom 2026-06-29external
- GitHub Security Advisory GHSA-jx8g-9g95-6322 vom 2026-06-29external
- GitHub Security Advisory GHSA-p957-7v2w-g93g vom 2026-06-29external
- GitHub Security Advisory GHSA-q59r-vq66-pxc2 vom 2026-06-29external
- GitHub Security Advisory GHSA-qrcv-3558-gj4f vom 2026-06-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan