https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:40:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06032 bdu:2023-06032 https://cve.radiocsirt.org/vuln/bdu:2023-06032 https://cve.radiocsirt.org/vuln/cnvd-2023-42971 cnvd-2023-42971 https://cve.radiocsirt.org/vuln/cnvd-2023-42971 https://cve.radiocsirt.org/vuln/euvd-2026-255745 EUVD-2026-255745 https://cve.radiocsirt.org/vuln/euvd-2026-255745 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33246 <p>For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.</p> <p>Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content.</p> <p>To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .</p> <p>For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.</p> <p>Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content.</p> <p>To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-33246 https://cve.radiocsirt.org/vuln/ghsa-x3cq-8f32-5f63 <p><strong>Affected:</strong> Maven: org.apache.rocketmq:rocketmq-broker, Maven: org.apache.rocketmq:rocketmq-namesrv, Maven: org.apache.rocketmq:rocketmq-controller</p> <p>For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.</p> <p>Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content.</p> <p>To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .</p> <p><strong>Affected:</strong> Maven: org.apache.rocketmq:rocketmq-broker, Maven: org.apache.rocketmq:rocketmq-namesrv, Maven: org.apache.rocketmq:rocketmq-controller</p> <p>For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.</p> <p>Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content.</p> <p>To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .</p> https://cve.radiocsirt.org/vuln/ghsa-x3cq-8f32-5f63 https://cve.radiocsirt.org/vuln/gsd-2023-33246 gsd-2023-33246 https://cve.radiocsirt.org/vuln/gsd-2023-33246