CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

RabbitMQ — security advisories

17 advisorieslatest 2026-08-19⚡ RSS feed

Tracked RabbitMQ products:

RabbitMQ Java Client

⚡ Watch RabbitMQ

Get an email when a new RabbitMQ advisory drops — max one per day, one-click unsubscribe.

[NEW] [medium] RabbitMQ Java Client: Multiple vulnerabilities

mediumCVE-2026-61634 CVE-2026-63335 CVE-2026-63336 CVE-2026-63337cert-bund2026-08-19

[NEW] [medium] RabbitMQ: Multiple vulnerabilities

mediumCVE-2026-67418 CVE-2026-67419 CVE-2026-67420 CVE-2026-67421cert-bund2026-08-18

CVE-2026-44839: RabbitMQ: Unsanitized vhost names allow for XSS in management UI

unknownCVE-2026-44839msrc2026-08-06

[UPDATE] [medium] RabbitMQ: Multiple Vulnerabilities

mediumCVE-2026-44839 CVE-2026-44838cert-bund2026-07-31

[NEW] [medium] RabbitMQ: Multiple vulnerabilities

mediumcert-bund2026-07-24

[NEW] [medium] RabbitMQ: Multiple vulnerabilities

mediumcert-bund2026-07-23

[UPDATE] [high] RabbitMQ: Multiple vulnerabilities

highCVE-2026-57215 CVE-2026-57216 CVE-2026-57217 CVE-2026-57218cert-bund2026-07-14

[UPDATE] [medium] RabbitMQ: Multiple vulnerabilities

mediumCVE-2026-57213 CVE-2026-57212 CVE-2026-57211 CVE-2026-57214cert-bund2026-07-14

CVE-2026-57220: RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS

highCVSS 7.5CVE-2026-57220msrc2026-07-14

CVE-2026-57213: RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering

mediumCVSS 4.8CVE-2026-57213msrc2026-07-14

CVE-2026-57217: RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass

mediumCVSS 6.5CVE-2026-57217msrc2026-07-14

CVE-2026-57215: RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom

unknownCVE-2026-57215msrc2026-07-14

CVE-2026-57211: RabbitMQ: UNC SSRF affecting the management UI on Windows

mediumCVSS 6.5CVE-2026-57211msrc2026-07-14

CVE-2026-57216: RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks

mediumCVSS 6.8CVE-2026-57216msrc2026-07-14

CVE-2026-57219: RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations

highCVSS 7.5CVE-2026-57219msrc2026-07-14

[NEW] [high] RabbitMQ: Multiple vulnerabilities

highcert-bund2026-07-10

[NEW] [low] RabbitMQ: Vulnerability allows information disclosure

lowcert-bund2026-07-09