Vendor
Rabbitmq
101 known vulnerabilities in products by Rabbitmq, 0 of them actively exploited (CISA KEV).
Key figures
101
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-57219 | Rabbitmq-server: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Critical | CVE-2020-36282 | Rabbitmq Jms Client: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2026-57211 | RabbitMQ: UNC SSRF affecting the management UI on Windows | 10.0 | |
| Critical | CVE-2026-77411 | Rabbitmq Amqp091-go: Improper Check for Unusual or Exceptional Conditions | — | |
| High | CVE-2026-69220 | Rabbitmq-java-client: Uncontrolled Recursion | — | |
| High | CVE-2026-69219 | Rabbitmq-java-client: Memory Allocation with Excessive Size Value | — | |
| Critical | CVE-2026-77408 | RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow | — | |
| Critical | CVE-2026-67237 | RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint | 9.3 | |
| High | CVE-2026-75516 | Rabbitmq-java-client: Allocation of Resources Without Limits or Throttling | — | |
| High | CVE-2026-77412 | RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client | — | |
| High | CVE-2026-77410 | RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation | — | |
| High | CVE-2026-77403 | RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation | — | |
| High | CVE-2026-79921 | Rabbitmq Amqp091-go: Allocation of Resources Without Limits or Throttling | — | |
| Critical | CVE-2026-57216 | Rabbitmq-server: Improper Authentication | 10.0 | |
| High | CVE-2026-67230 | RabbitMQ: Web-STOMP unbounded pre-auth accumulation | 7.5 | |
| Medium | CVE-2023-46118 | Denial of Service by publishing large messages over the HTTP API | 4.9 | |
| High | CVE-2026-77406 | Rabbitmq Amqp091-go: Signed to Unsigned Conversion Error | — | |
| High | CVE-2026-77409 | RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking | — | |
| High | CVE-2026-106122 | RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers | 7.5 | |
| High | CVE-2026-67409 | Rabbitmq-server: Unchecked Return Value | 6.5 | |
| High | CVE-2026-66070 | RabbitMQ: CORS * reflects Origin with Allow-Credentials | 8.8 | |
| High | CVE-2026-67410 | RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint | 7.1 | |
| High | CVE-2026-67232 | RabbitMQ: Web-MQTT decompression bomb | 7.5 | |
| High | CVE-2026-63337 | Rabbitmq-java-client: Unsafe Reflection | — | |
| Medium | CVE-2026-66071 | RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values | 6.5 |
News
Products
| Rabbitmq-server | 77 | 0 |
| Amqp091-go | 12 | 0 |
| Rabbitmq-java-client | 11 | 0 |