BIT-NATS-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters

🗓️ 14 Jul 2026 15:47:11Reported by GoogleType

osv🔗 osv.dev👁 2 Views

NATS server fixes denial bypass for retained messages and quality of service replay, protecting subscribe deny checks in MQTT paths; fixed in versions two fourteen three and two twelve twelve.

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2026-58209	8 Jul 202620:12	–	attackerkb
AlpineLinux	CVE-2026-58209	8 Jul 202620:12	–	alpinelinux
CVE	CVE-2026-58209	8 Jul 202620:12	–	cve
Cvelist	CVE-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters	8 Jul 202620:12	–	cvelist
Debian CVE	CVE-2026-58209	8 Jul 202620:12	–	debiancve
EUVD	EUVD-2026-42347	8 Jul 202620:12	–	euvd
NVD	CVE-2026-58209	8 Jul 202620:16	–	nvd
OSV	CVE-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters	8 Jul 202620:12	–	osv
OSV	DEBIAN-CVE-2026-58209	8 Jul 202620:16	–	osv
OSV	MINI-C2C3-6RQC-PWVW	14 Jul 202613:31	–	osv

Source	Link
github	www.github.com/nats-io/nats-server/commit/181b1f51f40b9954c57e9d478e051fb257679356
github	www.github.com/nats-io/nats-server/commit/1c429b6fdc5afd4188cc5faf1127f6334896cd87
github	www.github.com/nats-io/nats-server/releases/tag/v2.12.12
github	www.github.com/nats-io/nats-server/releases/tag/v2.14.3
github	www.github.com/nats-io/nats-server/security/advisories/GHSA-7qmq-8cc4-hxwg
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-58209

14 Jul 2026 16:40Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.14.3

EPSS0.00342

SSVC