113 matches found
CVE-2026-67419
A flaw was found in RabbitMQ. An authenticated remote user with permissions to bind queues to a topic exchange and publish messages can cause a Denial of Service DoS. By supplying consecutive wildcard characters within a topic binding key, the message routing engine redundantly evaluates matching...
CVE-2026-67241
A flaw was found in rabbitmq-server. This vulnerability allows an authenticated user to bypass access controls and perform unauthorized message routing. When an exchange is declared via the Advanced Message Queuing Protocol AMQP 1.0 management interface, the application fails to verify write...
CVE-2026-67233
A flaw was found in RabbitMQ. An authenticated monitoring user, who is intended to have read-only access, can exploit an improper authorization vulnerability. This allows them to delete or restart 'shovels' in any virtual host they can access, leading to a denial of service or disruption of messa...
CVE-2026-59305
A flaw was found in Spring Cloud Stream. A partition interceptor may be improperly added when messages are sent. This could lead to unexpected behavior or incorrect message processing within the application, potentially affecting message routing or data integrity. Mitigation Mitigation for this...
rabbitmq-server: rabbitmq-server: Denial of Service via consecutive wildcards in topic binding keys
A flaw was found in RabbitMQ. An authenticated remote user with permissions to bind queues to a topic exchange and publish messages can cause a Denial of Service DoS. By supplying consecutive wildcard characters within a topic binding key, the message routing engine redundantly evaluates matching...
rabbitmq-server: RabbitMQ: Information disclosure via improper access control in AMQP management endpoint
A flaw was found in RabbitMQ. The Advanced Message Queuing Protocol AMQP 1.0 management interface fails to perform proper authorization checks when processing requests for message bindings. An authenticated user without administrative privileges can exploit this issue to enumerate the complete...
rabbitmq-server: rabbitmq-server: Unauthorized message routing via missing alternate-exchange permission check
A flaw was found in rabbitmq-server. This vulnerability allows an authenticated user to bypass access controls and perform unauthorized message routing. When an exchange is declared via the Advanced Message Queuing Protocol AMQP 1.0 management interface, the application fails to verify write...
CVE-2026-69303
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-69303
CVE-2026-69303 is an out-of-bounds read in the Push Message Routing Service (Microsoft), rated CVSS 5.5 (MEDIUM) . An authorized attacker with low privileges can exploit this locally to disclose information, with no integrity or availability impact. CISA's SSVC assessment indicates no known explo...
EUVD-2026-73444
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
Push Message Routing Service Information Disclosure Vulnerability
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
PT-2026-87349
Name of the Vulnerable Software and Affected Versions Push Message Routing Service affected versions not specified Description An out-of-bounds read exists in the Push Message Routing Service, which allows an authorized attacker to disclose sensitive information locally and affect the system. An...
CVE-2026-69303: Out-of-bounds Read
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
Improper Interceptor Addition
Spring Cloud Stream is vulnerable to improper interceptor addition. The vulnerability is due to an improperly added PartitionInterceptor while sending a message, where the interceptor is attached without adequate validation and attackers can send crafted messages to manipulate message routing or...
CVE-2026-71300 Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection
Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket producer selects which connected WebSocket peers a message is...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via message routing in the System.Net.Mail SMTP client. An attacker can spoof email messages by exploiting flaws in the SMTP client during message routing, causing messages to appear as though the...