DeutschShown in its original language — a full translation is planned for a future version.
RabbitMQ: Mehrere Schwachstellen
view advisory published 2026-07-22
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um Denial-of-Service-Angriffe durchzuführen, Autorisierungs- und Mandantengrenzen zu umgehen, Daten zu manipulieren oder offenzulegen und Cross Site Scripting Angriffe durchzuführen.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-67415US | medium4.9 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage-… | ||||
| CVE-2026-67413US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange plugin's x-jms-topic exchange accepted a c… | ||||
| CVE-2026-67412US | high7.1OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost authorization allowing cross… | ||||
| CVE-2026-67410US | high7.1 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint (CWE-200). when OAuth2 authenti… | ||||
| CVE-2026-67409US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9, 4.1.14, 4.0.23, and 3.13.18, JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Ca… | ||||
| CVE-2026-67408US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of… | ||||
| CVE-2026-67407US | high7.1OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838: escaperegexchar/1 does not escape -, leavin… | ||||
| CVE-2026-67406US | medium6.5 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted… | ||||
| CVE-2026-67242US | medium5.4 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isinteger(Exp) guard skips token-expiry checks for float exp. validatetokenexpiry/1 (lines 20… | ||||
| CVE-2026-67241US | medium6.5OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check. pUT /exchanges/:name… | ||||
| CVE-2026-67239US | medium5.4 | — | ||
RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI (s… | ||||
| CVE-2026-67227US | medium4.9 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: toatom on global-parameter :name. resourceexists/2 (and the P… | ||||
| CVE-2026-67226US | medium4.9 | — | ||
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admin-only atom exhaustion: PUT /api/users tags list. settags/2 maps rabbitdatacoercion:… | ||||
| CVE-2026-67223US | high7.1 | — | ||
RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the… | ||||
| CVE-2026-61837US | medium5.3OT elevated | — | ||
RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topology to any authenticate… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-2hm4-4438-49q8 vom 2026-07-22external
- GitHub Security Advisory GHSA-34c7-r8w9-5wv8 vom 2026-07-22external
- GitHub Security Advisory GHSA-42pc-678q-v8qj vom 2026-07-22external
- GitHub Security Advisory GHSA-8mpg-qw9r-m5cr vom 2026-07-22external
- GitHub Security Advisory GHSA-9x7r-g78c-5835 vom 2026-07-22external
- GitHub Security Advisory GHSA-chxf-3hfg-j8f7 vom 2026-07-22external
- GitHub Security Advisory GHSA-f9f2-q3jf-wfj3 vom 2026-07-22external
- GitHub Security Advisory GHSA-q44f-9vc5-grh7 vom 2026-07-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan