https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:43:20.076096+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-57220 CVE-2026-57220 — RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-e… 2026-10-06T21:43:20.102669+00:00

Affected: rabbitmq-server

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener does not enforce the configured stream frame-size limit while assembling frames during authentication and before Tune negotiation, allowing an unauthenticated remote client to declare oversized frame lengths and consume broker memory in rabbit_stream_core. This issue is fixed in version 4.2.6.