CVE-2026-66069

RabbitMQ , a messaging and streaming broker, is vulnerable to a flaw where the is_authorized/2 function incorrectly uses is_authorized_monitor for all methods prior to versions 4.1.13, 4.2.7, and 4.3.0 . This allows a user with a monitoring tag to reset per-node authentication-attempt counters vi...

CVE-2026-66077

RabbitMQ versions prior to 3.13.15 , 4.0.20 , 4.1.11 , and 4.2.6 are vulnerable to Stored XSS via the management UI. The issue stems from the use of EJS 1.0 , where specific templates (connection.ejs and streamConnection.ejs) render the TLS peer-certificate Subject DN without HTML escaping. If a ...

CVE-2026-66077

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which does NOT HTML-escape. connection.ejs:135 renders and peercertissuer directly into the page. The same pattern appears in streamConnection.ejs:102,106,110. The...

CVE-2026-66077 RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which does NOT HTML-escape. connection.ejs:135 renders and peercertissuer directly into the page. The same pattern appears in streamConnection.ejs:102,106,110. The...

CVE-2026-66070

RabbitMQ is a messaging and streaming broker containing a vulnerability in the rabbit_mgmt_cors.erl component. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6 , the match_origin/1 function incorrectly reflected the request Origin while allowing credentials when a wildcard (*) was configured....

CVE-2026-66070

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, matchorigin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with...

CVE-2026-66070 RabbitMQ: CORS * reflects Origin with Allow-Credentials

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, matchorigin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with...

CVE-2026-66070 RabbitMQ: CORS * reflects Origin with Allow-Credentials

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, matchorigin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with...

CVE-2026-66076

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, isauthorized/2 calls rabbitmgmtutil:isauthorized/2, which checks only the management tag, instead of isauthorizedvhost/2. The /api/queues/quorum/:vhost/:queue/status handler reads the vhost...

CVE-2026-66076 RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, isauthorized/2 calls rabbitmgmtutil:isauthorized/2, which checks only the management tag, instead of isauthorizedvhost/2. The /api/queues/quorum/:vhost/:queue/status handler reads the vhost...

CVE-2026-66076 RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, isauthorized/2 calls rabbitmgmtutil:isauthorized/2, which checks only the management tag, instead of isauthorizedvhost/2. The /api/queues/quorum/:vhost/:queue/status handler reads the vhost...

CVE-2026-66076

The RabbitMQ messaging and streaming broker is vulnerable to a cross-vhost information disclosure issue in versions prior to 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0 . The root cause is that the is_authorized/2 function calls rabbit_mgmt_util:is_authorized/2, which incorrectly checks only the ma...

CVE-2026-82368

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches...

security-advisories

🔐 Minhajul Taivin によるセキュリティアドバイザリ 私が公開したCVE情報開示の公式リポジトリへようこそ。 このリポジトリには、私が発見した脆弱性に関する詳細なセキュリティアドバイザリ、概念実証（PoC）情報、緩和策、および技術的分析が含まれています。 📌 公開済みのCVE 1️⃣ CVE-2025-63892 — SourceCodester Student Grades Management System における格納型XSS 📄 アドバイザリ: CVE-2025-63892.md...

CVE-2024-27198_Lab

CVE-2024-27198Lab Vulnerability Research & Purple Team Demonstration Lab for JetBrains TeamCity Authentication Bypass CVE-2024-27198 Table of Contents About The Project CVE Details Built With Threat Intelligence & OSINT Real-World Impact & Exploitation Why this CVE is Critical Getting Started...

EUVD-2026-85356

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management...

CVE-2026-76460

CVE-2026-76460 このプロジェクトは、CVE-2026-76460 に着想を得た、模擬的な認証バイパスシナリオを実演するものです。このラボは意図的に教育的かつ安全に設計されています。実際のシステムを対象とすることなく、脆弱な挙動と修正済みの挙動をシミュレートするローカルの Flask API です。 目的 このアプリケーションは、特権管理 API が認証制御なしで公開される可能性があること、そして安全な実装が未認証アクセスをどのようにブロックするかを示します。 プロジェクト構成 root@kitploit: flowchart LR ClientLocal client or...

CVE-2026-61413

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-91182

A flaw was found in open-cluster-management. An agent communicating via the gRPC broker can bypass authorization by manipulating the ce-clustername cloud event header attribute, which is used for authorization, independently of the actual event payload. This allows a registered managed cluster to...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the NMS component including Streaming Telemetry with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security...