Product by Rabbitmq
Rabbitmq-server
77 known vulnerabilities in Rabbitmq-server (Rabbitmq), 0 of them actively exploited (CISA KEV).
Key figures
77
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-57219 | Rabbitmq-server: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Critical | CVE-2026-57211 | RabbitMQ: UNC SSRF affecting the management UI on Windows | 10.0 | |
| Critical | CVE-2026-67237 | RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint | 9.3 | |
| Critical | CVE-2026-57216 | Rabbitmq-server: Improper Authentication | 10.0 | |
| High | CVE-2026-67230 | RabbitMQ: Web-STOMP unbounded pre-auth accumulation | 7.5 | |
| Medium | CVE-2023-46118 | Denial of Service by publishing large messages over the HTTP API | 4.9 | |
| High | CVE-2026-67409 | Rabbitmq-server: Unchecked Return Value | 6.5 | |
| High | CVE-2026-66070 | RabbitMQ: CORS * reflects Origin with Allow-Credentials | 8.8 | |
| High | CVE-2026-67410 | RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint | 7.1 | |
| High | CVE-2026-67232 | RabbitMQ: Web-MQTT decompression bomb | 7.5 | |
| Medium | CVE-2026-66071 | RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values | 6.5 | |
| Medium | CVE-2026-67414 | RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation | — | |
| High | CVE-2026-67408 | Rabbitmq-server: Uncontrolled Resource Consumption | 6.5 | |
| Medium | CVE-2026-67416 | RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation | — | |
| Critical | CVE-2026-67231 | RabbitMQ: Trust-store whitelist by Issuer+Serial only | 9.1 | |
| Medium | CVE-2026-67413 | Rabbitmq-server: Inefficient Regular Expression Complexity | 6.5 | |
| Critical | CVE-2026-67404 | RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch | 7.4 | |
| Medium | CVE-2026-66073 | RabbitMQ: Atom table exhaustion via management API node field | 6.5 | |
| High | CVE-2026-57220 | Rabbitmq-server: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-66079 | RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS | 7.5 | |
| Medium | CVE-2026-66072 | RabbitMQ: Atom table exhaustion via stream `chunk_selector` | 6.5 | |
| High | CVE-2026-67225 | RabbitMQ: Stream-protocol frame length never validated against frame_max | 7.5 | |
| High | CVE-2026-57215 | Rabbitmq-server: Incorrect Authorization | 8.8 | |
| Medium | CVE-2026-67241 | RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check | 6.5 | |
| High | CVE-2026-67419 | RabbitMQ: Consecutive topic wildcards cause combinatorial routing work | 6.5 |