CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products

NATS Server — security advisories

vendor: NATS8 advisories2 sourceslatest 2026-07-09⚡ RSS feed

Every advisory CSIRTS.com has correlated to NATS Server, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch NATS Server

Get an email when a new NATS Server advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [high] NATS Server: Multiple vulnerabilities

highCVE-2026-58207 CVE-2026-58208 CVE-2026-58209 CVE-2026-58210cert-bund2026-07-09

CVE-2026-58252: NATS Server: Subscribe Authz Bypass via Wildcard-Overlap

mediumCVSS 6.5CVE-2026-58252msrc2026-07-02

CVE-2026-58207: NATS Server: Remote crash via integer overflow in Connz pagination

highCVSS 7.7CVE-2026-58207msrc2026-07-02

CVE-2026-58208: NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled

mediumCVSS 6.8CVE-2026-58208msrc2026-07-02

CVE-2026-58253: NATS Server: Route API Auth Bypass

highCVSS 8.8CVE-2026-58253msrc2026-07-02

CVE-2026-58250: NATS Server: Pre-auth server crash via double INFO in leafnode handshake

highCVSS 7.5CVE-2026-58250msrc2026-07-02

CVE-2026-58251: NATS Server: Queue Subscribe Authz Bypass

mediumCVSS 6.5CVE-2026-58251msrc2026-07-02

CVE-2026-58209: NATS Server: MQTT retained and QoS replay bypass subscribe deny filters

mediumCVSS 4.3CVE-2026-58209msrc2026-07-02