CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

NATS — security advisories

8 advisorieslatest 2026-07-09⚡ RSS feed

Tracked NATS products:

⚡ Watch NATS

Get an email when a new NATS advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [high] NATS Server: Multiple vulnerabilities

highCVE-2026-58207 CVE-2026-58208 CVE-2026-58209 CVE-2026-58210cert-bund2026-07-09

CVE-2026-58252: NATS Server: Subscribe Authz Bypass via Wildcard-Overlap

mediumCVSS 6.5CVE-2026-58252msrc2026-07-02

CVE-2026-58207: NATS Server: Remote crash via integer overflow in Connz pagination

highCVSS 7.7CVE-2026-58207msrc2026-07-02

CVE-2026-58208: NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled

mediumCVSS 6.8CVE-2026-58208msrc2026-07-02

CVE-2026-58253: NATS Server: Route API Auth Bypass

highCVSS 8.8CVE-2026-58253msrc2026-07-02

CVE-2026-58250: NATS Server: Pre-auth server crash via double INFO in leafnode handshake

highCVSS 7.5CVE-2026-58250msrc2026-07-02

CVE-2026-58251: NATS Server: Queue Subscribe Authz Bypass

mediumCVSS 6.5CVE-2026-58251msrc2026-07-02

CVE-2026-58209: NATS Server: MQTT retained and QoS replay bypass subscribe deny filters

mediumCVSS 4.3CVE-2026-58209msrc2026-07-02