Advisories · Technology

Rocket.Chat.

Every CVE that names Rocket.Chat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65644 CVE record

CVSS 7.5 High

Cross-site scripting in Rocket.Chat
- Rocket.Chat
- Cross-site scripting (XSS)
Not analysed yet 21 Aug 2026
CVE-2026-65645 CVE record

CVSS 4.3 Medium

Improper input validation in Rocket.Chat
- Rocket.Chat
- CWE-20
Not analysed yet 21 Aug 2026
CVE-2026-56845 CVE record

CVSS 7.5 High

Path traversal in Rocket.Chat
- Rocket.Chat
- Path traversal
Not analysed yet 4 Aug 2026
CVE-2026-58066 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authentication in Rocket.Chat
- Rocket.Chat
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-48616 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper access control in Rocket.Chat
- Rocket.Chat
- Broken access control
Not analysed yet 16 Jun 2026
CVE-2026-48929 CVE record

CVSS 7.5 High

Improper authentication in Rocket.Chat
- Rocket.Chat
- Authentication bypass
Not analysed yet 16 Jun 2026
CVE-2026-32995 CVE record

CVSS 7.5 High

Improper access control in Rocket.Chat
- Rocket.Chat
- Broken access control
Not analysed yet 28 May 2026
CVE-2026-32994 CVE record

CVSS 5.3 Medium

Improper access control in Rocket.Chat
- Rocket.Chat
- Broken access control
Not analysed yet 19 May 2026
CVE-2026-29197 CVE record

CVSS 4.3 Medium

Improper access control in Rocket.Chat
- Rocket.Chat
- Broken access control
Not analysed yet 23 Apr 2026
CVE-2026-29198 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL injection in Rocket.Chat
- Rocket.Chat
- SQL injection
Not analysed yet 22 Apr 2026
CVE-2026-22560 CVE record

CVSS 5.3 Medium

Open redirect in Rocket.Chat
- Rocket.Chat
- Open redirect
Not analysed yet 10 Apr 2026
CVE-2025-7974 CVE record

CVSS 3.7 Low

rocket.chat Incorrect Authorization Information Disclosure Vulnerability
- rocket.chat
- Broken access control
Not analysed yet 2 Sept 2025
CVE-2024-37405 CVE record

CVSS 6.5 Medium

Code injection in Rocket.Chat
- Rocket.Chat
- Code injection
Not analysed yet 12 Jul 2024
CVE-2023-28359 CVE record

CVSS 5.3 Medium

SQL injection in Rocket.Chat
- Rocket.Chat
- SQL injection
Not analysed yet 11 May 2023
CVE-2023-28358 CVE record

CVSS 6.1 Medium

Cross-site scripting in Rocket.Chat
- Rocket.Chat
- Cross-site scripting (XSS)
Not analysed yet 11 May 2023
CVE-2023-28357 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
- Broken access control
Not analysed yet 11 May 2023
CVE-2023-28356 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Rocket.Chat
- Rocket.Chat
- Denial of service
Not analysed yet 11 May 2023
CVE-2023-28325 CVE record

CVSS 6.5 Medium

Improper authorization in Rocket.Chat
- Rocket.Chat
- Broken access control
Not analysed yet 11 May 2023
CVE-2023-28318 CVE record

CVSS 5.3 Medium

Improper authorization in Rocket.Chat
- Rocket.Chat
- Broken access control
- CWE-346
Not analysed yet 9 May 2023
CVE-2023-28317 CVE record

CVSS 5.3 Medium

Improper authorization in Rocket.Chat
- Rocket.Chat
- Broken access control
- CWE-494
Not analysed yet 9 May 2023
CVE-2023-28316 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Session fixation in Rocket.Chat
- Rocket.Chat
- Authentication bypass
Not analysed yet 9 May 2023
CVE-2023-23911 CVE record

Improper access control in Rocket.Chat
- Rocket.Chat
- Broken access control
Not analysed yet 10 Mar 2023
CVE-2023-23917 CVE record

CVSS 8.8 High

Command injection in Rocket.chat
- Rocket.chat
- Command injection
- Prototype pollution
Not analysed yet 23 Feb 2023
CVE-2022-32220 CVE record

CVSS 6.5 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-32219 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-32217 CVE record

CVSS 5.3 Medium

Cleartext storage of sensitive information in Rocket.chat
- Rocket.chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-32211 CVE record

CVSS 8.8 High

SQL injection in Rocket.Chat
- Rocket.Chat
- SQL injection
Not analysed yet 23 Sept 2022
CVE-2022-35247 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-32229 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-32228 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-32227 CVE record

CVSS 6.5 Medium

Cleartext transmission of sensitive information in Rocket.Chat
- Rocket.Chat
- Weak cryptography or TLS
Not analysed yet 23 Sept 2022
CVE-2022-32226 CVE record

CVSS 4.3 Medium

Improper access control in Rocket.Chat
- Rocket.Chat
- Broken access control
Not analysed yet 23 Sept 2022
CVE-2022-32218 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.chat
- Rocket.chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-35251 CVE record

CVSS 5.4 Medium

Cross-site scripting in Rocket.chat
- Rocket.chat
- Cross-site scripting (XSS)
Not analysed yet 23 Sept 2022
CVE-2022-35250 CVE record

CVSS 4.3 Medium

Incorrect permission assignment in Rocket.chat
- Rocket.chat
- Broken access control
Not analysed yet 23 Sept 2022
CVE-2022-35249 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2022-35248 CVE record

Improper authentication in Rocket.Chat
- Rocket.Chat
- Authentication bypass
Not analysed yet 23 Sept 2022
CVE-2022-35246 CVE record

CVSS 4.3 Medium

Information disclosure in Rocket.Chat
- Rocket.Chat
- Information disclosure
Not analysed yet 23 Sept 2022
CVE-2021-22886 CVE record

Cross-site scripting in Rocket.Chat
- Rocket.Chat
- Cross-site scripting (XSS)
Not analysed yet 26 Mar 2021