https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:41:48.559376+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335996 EUVD-2026-335996 2026-10-02T18:41:48.683438+00:00 EUVD-2026-335996 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57217 fkie_cve-2026-57217 2026-10-02T18:41:48.683480+00:00

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, RabbitMQ topic authorization can allow restricted topic writes and binds during metadata-store failures because topic-permission lookup errors from Khepri can collapse to undefined, which the internal backend treats as allow. This issue is fixed in versions 3.13.15, 4.0.21, 4.1.11, and 4.2.6.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-57217 msrc_CVE-2026-57217 — RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass 2026-10-02T18:41:48.683514+00:00 msrc_CVE-2026-57217 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21903-1 openSUSE-SU-2026:21903-1 — Security update for rabbitmq-server 2026-10-02T18:41:48.683533+00:00

Security update for rabbitmq-server

 https://cve.radiocsirt.org/vuln/rhsa-2026:35939 RHSA-2026:35939 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T18:41:48.683557+00:00

rabbitmq: RabbitMQ: Information disclosure via path validation bypass in management plugin rabbitmq-server: RabbitMQ: Denial of Service via oversized JSON bodies in HTTP API rabbitmq-server: RabbitMQ: Information Disclosure via Cross-Site Scripting in Federation Management RabbitMQ: RabbitMQ: Cross-site Scripting in management UI allows arbitrary JavaScript execution RabbitMQ: RabbitMQ: Persistent foreign bindings allow unauthorized message routing rabbitmq: RabbitMQ: Authentication bypass allows remote connection for loopback-restricted users via incorrect loopback check rabbitmq: RabbitMQ: Authorization bypass allows unauthorized topic writes and binds during metadata-store failures rabbitmq-server: RabbitMQ: Information disclosure due to improper consumer reauthorization RabbitMQ: RabbitMQ: OAuth 2 client secret disclosure via obsolete API endpoint rabbitmq-server: RabbitMQ: Denial of Service via oversized stream frames RabbitMQ: RabbitMQ: Information disclosure via authorization bypass in AMQP 0-9-1 operations

 https://cve.radiocsirt.org/vuln/suse-su-2026:23859-1 SUSE-SU-2026:23859-1 — Security update for rabbitmq-server 2026-10-02T18:41:48.683590+00:00

Security update for rabbitmq-server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57217 UBUNTU-CVE-2026-57217 2026-10-02T18:41:48.683611+00:00

Affected: Ubuntu:Pro:16.04:LTS: rabbitmq-server, Ubuntu:18.04:LTS: rabbitmq-server, Ubuntu:20.04:LTS: rabbitmq-server, Ubuntu:22.04:LTS: rabbitmq-server, Ubuntu:24.04:LTS: rabbitmq-server, Ubuntu:26.04:LTS: rabbitmq-server

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, RabbitMQ topic authorization can allow restricted topic writes and binds during metadata-store failures because topic-permission lookup errors from Khepri can collapse to undefined, which the internal backend treats as allow. This issue is fixed in versions 3.13.15, 4.0.21, 4.1.11, and 4.2.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2079 WID-SEC-W-2026-2079 — RabbitMQ: Mehrere Schwachstellen 2026-10-02T18:41:48.683640+00:00

Ein Angreifer kann mehrere Schwachstellen in RabbitMQ ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen, was möglicherweise weitere Angriffe ermöglicht.