CVE-2026-57211

🗓️ 28 Jul 2026 12:49:01Reported by redhat.comType

RabbitMQ Windows management plugin path traversal via URL-encoded backslashes with multiple extensions enables outbound domain name system and server message block requests.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2026-57211	10 Jul 202620:16	–	attackerkb
CBLMariner	CVE-2026-57211 affecting package rabbitmq-server for versions less than 3.13.7-7	22 Jul 202622:06	–	cbl_mariner
Circl	CVE-2026-57211	11 Jul 202602:34	–	circl
CVE	CVE-2026-57211	10 Jul 202620:16	–	cve
Cvelist	CVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on Windows	10 Jul 202620:16	–	cvelist
Debian CVE	CVE-2026-57211	10 Jul 202620:16	–	debiancve
EUVD	EUVD-2026-43016	10 Jul 202620:16	–	euvd
Microsoft CVE	RabbitMQ: UNC SSRF affecting the management UI on Windows	15 Jul 202608:03	–	mscve
NVD	CVE-2026-57211	10 Jul 202621:16	–	nvd
OSV	CVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on Windows	10 Jul 202620:16	–	osv

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-57211
github	www.github.com/rabbitmq/rabbitmq-server/commit/39c3a8e9c71da0403d8dfc13f700e60c936e3682
github	www.github.com/rabbitmq/rabbitmq-server/commit/6730797f6a34b4e8308cea60adf1243857e70204
github	www.github.com/rabbitmq/rabbitmq-server/pull/15803
github	www.github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.6
github	www.github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-7v84-m3g5-vxq6
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

28 Jul 2026 12:49Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.5 - 10

EPSS0.00429