https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:38:42.018881+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-04152 bdu:2025-04152 2026-10-03T16:38:42.037626+00:00 bdu:2025-04152 https://cve.radiocsirt.org/vuln/bit-rabbitmq-2021-32718 BIT-rabbitmq-2021-32718 — Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI 2026-10-03T16:38:42.037681+00:00

Affected: Bitnami: rabbitmq

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.

 https://cve.radiocsirt.org/vuln/euvd-2026-28097 EUVD-2026-28097 2026-10-03T16:38:42.037725+00:00 EUVD-2026-28097 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32718 fkie_cve-2021-32718 2026-10-03T16:38:42.037739+00:00

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.

 https://cve.radiocsirt.org/vuln/gsd-2021-32718 gsd-2021-32718 2026-10-03T16:38:42.037766+00:00 gsd-2021-32718 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1334-1 openSUSE-SU-2021:1334-1 — Security update for rabbitmq-server 2026-10-03T16:38:42.037778+00:00

Security update for rabbitmq-server

 https://cve.radiocsirt.org/vuln/rhsa-2022:8851 RHSA-2022:8851 — Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (rabbitmq-server) security update 2026-10-03T16:38:42.037797+00:00

rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI rabbitmq-server: improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin

 https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 SUSE-FU-2024:2078-1 — Feature update for rabbitmq-server313, erlang26, elixir115 2026-10-03T16:38:42.037817+00:00

Feature update for rabbitmq-server313, erlang26, elixir115

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32718 UBUNTU-CVE-2021-32718 2026-10-03T16:38:42.037834+00:00

Affected: Ubuntu:20.04:LTS: rabbitmq-server

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper `<script>` tag sanitization, potentially allowing for JavaScript code execution in the context of the page. In order for this to occur, the user must be signed in and have elevated permissions (other user management). The vulnerability is patched in RabbitMQ 3.8.17. As a workaround, disable `rabbitmq_management` plugin and use CLI tools for management operations and Prometheus and Grafana for metrics and monitoring.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2258 WID-SEC-W-2022-2258 — RabbitMQ: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-03T16:38:42.037858+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.