CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,479 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,479
Show in the list
Critical, last 7 days
360
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product broadcom:rabbitmq_server. Show all products

35 CVEs, showing 1 to 35
CVESeverityTitlePublished
CVE-2026-44838High 8.1RabbitMQ is a messaging and streaming broker.May 27, 2026
CVE-2026-44839Medium 4.8RabbitMQ is a messaging and streaming broker.May 27, 2026
CVE-2026-57211Critical 10.0RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57212High 7.7RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57213Medium 4.8RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57214Medium 5.4RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57215High 8.8RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57216Critical 10.0RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57217Medium 6.5RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57218Medium 6.5RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57219High 7.5RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57220High 7.5RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-57221Medium 5.0RabbitMQ is a messaging and streaming broker.Jul 10, 2026
CVE-2026-67236High 8.2RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67222Medium 5.9RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-66073Medium 6.0RabbitMQ: Atom table exhaustion via management API node field
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-66078Low 2.1RabbitMQ: protected tag bypass via bulk-delete
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-66071Medium 6.0RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67241Medium 4.8RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67239High 7.6RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67223Medium 6.3RabbitMQ: LDAP DN injection via unescaped substitution
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67242Medium 6.3RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67409High 8.2RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67412Medium 6.0RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67415Medium 5.9RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-61837Medium 6.3RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67413Medium 6.0RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67411Medium 6.0RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67407Medium 5.1RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67410High 8.2RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67406Medium 4.6RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67408High 7.1RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67421Medium 4.5RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67419High 7.1RabbitMQ: Consecutive topic wildcards cause combinatorial routing work
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-67420Low 2.3RabbitMQ OAuth credential refresh retains revoked runtime tags
Assigned by GitHub_M
Sep 25, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.