https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:17:22.380970+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-rabbitmq-2022-31008 BIT-rabbitmq-2022-31008 — Predictable credential obfuscation seed value used in rabbitmq-server 2026-10-04T07:17:22.394687+00:00

Affected: Bitnami: rabbitmq

RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.

 https://cve.radiocsirt.org/vuln/euvd-2026-233544 EUVD-2026-233544 2026-10-04T07:17:22.394777+00:00 EUVD-2026-233544 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31008 fkie_cve-2022-31008 2026-10-04T07:17:22.394807+00:00

RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.

 https://cve.radiocsirt.org/vuln/ghsa-v9gv-xp36-jgj8 GHSA-v9gv-xp36-jgj8 — RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins 2026-10-04T07:17:22.394865+00:00

Affected: Hex: rabbit_common

### Impact

Shovel and Federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret.

This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log.

Patched versions correctly use a cluster-wide secret for that purpose.

### Patches

Patched versions:

* `3.10.2` * `3.9.18` * `3.8.32`

### Workarounds

Disable Shovel and Federation plugins.

### Credits

RabbitMQ core team would like to thank Lajos @luos Gerecs and Anh Nguyen from Erlang Solutions for responsibly disclosing and working with us on a patch for this vulnerability.

### For more information

* [Mailing list](https://groups.google.com/forum/#!forum/rabbitmq-users) * [Community Slack](https://rabbitmq-slack.herokuapp.com/)

 https://cve.radiocsirt.org/vuln/gsd-2022-31008 gsd-2022-31008 2026-10-04T07:17:22.394955+00:00 gsd-2022-31008 https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 SUSE-FU-2024:2078-1 — Feature update for rabbitmq-server313, erlang26, elixir115 2026-10-04T07:17:22.394984+00:00

Feature update for rabbitmq-server313, erlang26, elixir115

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31008 UBUNTU-CVE-2022-31008 2026-10-04T07:17:22.395028+00:00

Affected: Ubuntu:22.04:LTS: broker

RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1643 WID-SEC-W-2022-1643 — RabbitMQ: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T07:17:22.395081+00:00

Ein lokaler Angreifer kann eine Schwachstelle in RabbitMQ ausnutzen, um Informationen offenzulegen.