https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:22:35.181840+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335312 EUVD-2026-335312 2026-10-03T18:22:35.263449+00:00 EUVD-2026-335312 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58208 fkie_cve-2026-58208 2026-10-03T18:22:35.263489+00:00

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with access to the WebSocket listener to reach uninitialized MQTT state and crash the server process. This issue is fixed in versions 2.14.3 and 2.12.12.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-58208 msrc_CVE-2026-58208 — NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled 2026-10-03T18:22:35.263526+00:00 msrc_CVE-2026-58208 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58208 UBUNTU-CVE-2026-58208 2026-10-03T18:22:35.263546+00:00

Affected: Ubuntu:24.04:LTS: nats-server, Ubuntu:25.10: nats-server, Ubuntu:Pro:26.04:LTS: nats-server

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with access to the WebSocket listener to reach uninitialized MQTT state and crash the server process. This issue is fixed in versions 2.14.3 and 2.12.12.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2132 WID-SEC-W-2026-2132 — NATS Server: Mehrere Schwachstellen 2026-10-03T18:22:35.263574+00:00

Ein Angreifer kann mehrere Schwachstellen in NATS Server ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.