agentprime: rabbitmq-serverEvery new CVE for rabbitmq-server.https://agentprime.io/CVE-2026-67418: RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribershttps://agentprime.io/advisories/CVE-2026-67418/https://agentprime.io/advisories/CVE-2026-67418/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:07:29 GMTCVECVE-2026-67414: RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregationhttps://agentprime.io/advisories/CVE-2026-67414/https://agentprime.io/advisories/CVE-2026-67414/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:04:07 GMTCVECVE-2026-67416: RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validationhttps://agentprime.io/advisories/CVE-2026-67416/https://agentprime.io/advisories/CVE-2026-67416/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 16:00:32 GMTCVECVE-2026-67420: RabbitMQ OAuth credential refresh retains revoked runtime tagshttps://agentprime.io/advisories/CVE-2026-67420/https://agentprime.io/advisories/CVE-2026-67420/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:42:49 GMTCVECVE-2026-67419: RabbitMQ: Consecutive topic wildcards cause combinatorial routing workhttps://agentprime.io/advisories/CVE-2026-67419/https://agentprime.io/advisories/CVE-2026-67419/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:41:08 GMTCVECVE-2026-67421: RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handlinghttps://agentprime.io/advisories/CVE-2026-67421/https://agentprime.io/advisories/CVE-2026-67421/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:39:02 GMTCVECVE-2026-67408: RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Servicehttps://agentprime.io/advisories/CVE-2026-67408/https://agentprime.io/advisories/CVE-2026-67408/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:35:22 GMTCVECVE-2026-67406: RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_statushttps://agentprime.io/advisories/CVE-2026-67406/https://agentprime.io/advisories/CVE-2026-67406/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:34:06 GMTCVECVE-2026-67410: RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpointhttps://agentprime.io/advisories/CVE-2026-67410/https://agentprime.io/advisories/CVE-2026-67410/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:32:51 GMTCVECVE-2026-67227: RabbitMQ: Atom exhaustion: to_atom on global-parameter :namehttps://agentprime.io/advisories/CVE-2026-67227/https://agentprime.io/advisories/CVE-2026-67227/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:31:45 GMTCVECVE-2026-67407: RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypasshttps://agentprime.io/advisories/CVE-2026-67407/https://agentprime.io/advisories/CVE-2026-67407/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:30:35 GMTCVECVE-2026-67226: RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags listhttps://agentprime.io/advisories/CVE-2026-67226/https://agentprime.io/advisories/CVE-2026-67226/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:29:13 GMTCVECVE-2026-67411: RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypasshttps://agentprime.io/advisories/CVE-2026-67411/https://agentprime.io/advisories/CVE-2026-67411/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:26:33 GMTCVECVE-2026-67413: RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expressionhttps://agentprime.io/advisories/CVE-2026-67413/https://agentprime.io/advisories/CVE-2026-67413/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:25:26 GMTCVECVE-2026-61837: RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checkshttps://agentprime.io/advisories/CVE-2026-61837/https://agentprime.io/advisories/CVE-2026-61837/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:22:43 GMTCVECVE-2026-67415: RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Servicehttps://agentprime.io/advisories/CVE-2026-67415/https://agentprime.io/advisories/CVE-2026-67415/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:21:04 GMTCVECVE-2026-67412: RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message accesshttps://agentprime.io/advisories/CVE-2026-67412/https://agentprime.io/advisories/CVE-2026-67412/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:20:13 GMTCVECVE-2026-67409: RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoShttps://agentprime.io/advisories/CVE-2026-67409/https://agentprime.io/advisories/CVE-2026-67409/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:18:25 GMTCVECVE-2026-67242: RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exphttps://agentprime.io/advisories/CVE-2026-67242/https://agentprime.io/advisories/CVE-2026-67242/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:16:14 GMTCVECVE-2026-67223: RabbitMQ: LDAP DN injection via unescaped substitutionhttps://agentprime.io/advisories/CVE-2026-67223/https://agentprime.io/advisories/CVE-2026-67223/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:15:08 GMTCVECVE-2026-67239: RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UIhttps://agentprime.io/advisories/CVE-2026-67239/https://agentprime.io/advisories/CVE-2026-67239/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:13:29 GMTCVECVE-2026-67241: RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission checkhttps://agentprime.io/advisories/CVE-2026-67241/https://agentprime.io/advisories/CVE-2026-67241/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:12:14 GMTCVECVE-2026-66071: RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope valueshttps://agentprime.io/advisories/CVE-2026-66071/https://agentprime.io/advisories/CVE-2026-66071/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:11:07 GMTCVECVE-2026-66078: RabbitMQ: protected tag bypass via bulk-deletehttps://agentprime.io/advisories/CVE-2026-66078/https://agentprime.io/advisories/CVE-2026-66078/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:09:46 GMTCVECVE-2026-66073: RabbitMQ: Atom table exhaustion via management API node fieldhttps://agentprime.io/advisories/CVE-2026-66073/https://agentprime.io/advisories/CVE-2026-66073/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:06:20 GMTCVECVE-2026-67237: RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpointhttps://agentprime.io/advisories/CVE-2026-67237/https://agentprime.io/advisories/CVE-2026-67237/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:05:16 GMTCVECVE-2026-67234: RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preferencehttps://agentprime.io/advisories/CVE-2026-67234/https://agentprime.io/advisories/CVE-2026-67234/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:03:38 GMTCVECVE-2026-67225: RabbitMQ: Stream-protocol frame length never validated against frame_maxhttps://agentprime.io/advisories/CVE-2026-67225/https://agentprime.io/advisories/CVE-2026-67225/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:02:37 GMTCVECVE-2026-67230: RabbitMQ: Web-STOMP unbounded pre-auth accumulationhttps://agentprime.io/advisories/CVE-2026-67230/https://agentprime.io/advisories/CVE-2026-67230/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:01:40 GMTCVECVE-2026-67222: RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_clienthttps://agentprime.io/advisories/CVE-2026-67222/https://agentprime.io/advisories/CVE-2026-67222/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:00:16 GMTCVECVE-2026-67236: RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /loginhttps://agentprime.io/advisories/CVE-2026-67236/https://agentprime.io/advisories/CVE-2026-67236/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:59:10 GMTCVECVE-2026-67233: RabbitMQ: Monitoring-tag user can DELETE shovelshttps://agentprime.io/advisories/CVE-2026-67233/https://agentprime.io/advisories/CVE-2026-67233/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 15:12:35 GMTCVECVE-2026-67221: RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwordshttps://agentprime.io/advisories/CVE-2026-67221/https://agentprime.io/advisories/CVE-2026-67221/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:48:53 GMTCVECVE-2026-67231: RabbitMQ: Trust-store whitelist by Issuer+Serial onlyhttps://agentprime.io/advisories/CVE-2026-67231/https://agentprime.io/advisories/CVE-2026-67231/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:47:36 GMTCVEcriticalCVE-2026-67218: RabbitMQ: Super-stream HTTP creation skips configure-permission checkhttps://agentprime.io/advisories/CVE-2026-67218/https://agentprime.io/advisories/CVE-2026-67218/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:46:33 GMTCVECVE-2026-66074: RabbitMQ: ReDoS via management API ?name= filterhttps://agentprime.io/advisories/CVE-2026-66074/https://agentprime.io/advisories/CVE-2026-66074/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:45:28 GMTCVECVE-2026-67232: RabbitMQ: Web-MQTT decompression bombhttps://agentprime.io/advisories/CVE-2026-67232/https://agentprime.io/advisories/CVE-2026-67232/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:42:23 GMTCVECVE-2026-67405: RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)https://agentprime.io/advisories/CVE-2026-67405/https://agentprime.io/advisories/CVE-2026-67405/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:41:14 GMTCVECVE-2026-66075: RabbitMQ: Monitoring-tag user can restart federation linkshttps://agentprime.io/advisories/CVE-2026-66075/https://agentprime.io/advisories/CVE-2026-66075/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:39:59 GMTCVECVE-2026-67219: RabbitMQ: Consistent-hash exchange unbounded weighthttps://agentprime.io/advisories/CVE-2026-67219/https://agentprime.io/advisories/CVE-2026-67219/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:38:42 GMTCVECVE-2026-67228: RabbitMQ: Atom exhaustion: to_atom on runtime-parameter componenthttps://agentprime.io/advisories/CVE-2026-67228/https://agentprime.io/advisories/CVE-2026-67228/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:37:40 GMTCVECVE-2026-67235: RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizehttps://agentprime.io/advisories/CVE-2026-67235/https://agentprime.io/advisories/CVE-2026-67235/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:36:37 GMTCVECVE-2026-66068: RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIshttps://agentprime.io/advisories/CVE-2026-66068/https://agentprime.io/advisories/CVE-2026-66068/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:24:35 GMTCVECVE-2026-67229: RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadatahttps://agentprime.io/advisories/CVE-2026-67229/https://agentprime.io/advisories/CVE-2026-67229/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:22:40 GMTCVECVE-2026-66080: RabbitMQ: Super-stream partitions unbounded allocationhttps://agentprime.io/advisories/CVE-2026-66080/https://agentprime.io/advisories/CVE-2026-66080/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:20:34 GMTCVECVE-2026-67240: RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcardhttps://agentprime.io/advisories/CVE-2026-67240/https://agentprime.io/advisories/CVE-2026-67240/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:19:22 GMTCVECVE-2026-66072: RabbitMQ: Atom table exhaustion via stream `chunk_selector`https://agentprime.io/advisories/CVE-2026-66072/https://agentprime.io/advisories/CVE-2026-66072/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:13:13 GMTCVECVE-2026-66067: RabbitMQ: Stream protocol skips per vhost per user connection limitshttps://agentprime.io/advisories/CVE-2026-66067/https://agentprime.io/advisories/CVE-2026-66067/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:12:00 GMTCVECVE-2026-66069: RabbitMQ: Monitoring-tag DELETE of auth-attempt metricshttps://agentprime.io/advisories/CVE-2026-66069/https://agentprime.io/advisories/CVE-2026-66069/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:09:28 GMTCVECVE-2026-67404: RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchhttps://agentprime.io/advisories/CVE-2026-67404/https://agentprime.io/advisories/CVE-2026-67404/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:08:02 GMTCVEcritical