CVE-2026-58253

🗓️ 08 Jul 2026 19:43:13Reported by MendType

Unauthenticated CONNECT auth bypass in NATS Server via no_auth_user parser fast path.

Reporter	Title	Published	Views	Family All 27
attackerkb	CVE-2026-58253	8 Jul 202619:43	–	attackerkb
BDU FSTEC	NATS Messaging System Authentication Bypass Privilege Escalation	14 Jul 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-58253 affecting package telegraf for versions less than 1.31.0-24	18 Jul 202601:38	–	cbl_mariner
Circl	CVE-2026-58253	8 Jul 202621:30	–	circl
CVE	CVE-2026-58253	8 Jul 202619:43	–	cve
Cvelist	CVE-2026-58253 NATS Server: Route API Auth Bypass	8 Jul 202619:43	–	cvelist
Debian CVE	CVE-2026-58253	8 Jul 202619:43	–	debiancve
EUVD	EUVD-2026-42375	8 Jul 202619:43	–	euvd
Microsoft CVE	NATS Server: Route API Auth Bypass	11 Jul 202608:08	–	mscve
NVD	CVE-2026-58253	8 Jul 202620:16	–	nvd

Vulners

Node

linuxfoundation nats-serverRange2.0.0-RC14.0.20190604014547-ed1901c79292–2.11.16

Source	Link
github	www.github.com/nats-io/nats-server/releases/tag/v2.12.7
github	www.github.com/nats-io/nats-server/commit/8b8e1ad4ceed32321e00d4fc6e76be05bc13bca6
github	www.github.com/nats-io/nats-server/releases/tag/v2.11.16
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58253.json
github	www.github.com/nats-io/nats-server/security/advisories/GHSA-38x3-76xf-cq45
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-58253
github	www.github.com/nats-io/nats-server/releases/tag/v2.14.0
github	www.github.com/nats-io/nats-server/commit/b86147e81710a52b72a7f7275f91d69f723f5cb3
github	www.github.com/nats-io/nats-server/commit/7b81dd455ea95960090a84858c7662827948d1b6

07 Oct 2026 22:49Current

7.6High risk

Vulners AI Score7.6

CVSS 48.5

CVSS 3.18.8

EPSS0.00368

SSVC