771 matches found
nats-server: NATS Server: Denial of Service via incomplete MQTT CONNECT packets
A flaw was found in NATS Server. An unauthenticated remote attacker could send large, incomplete MQTT CONNECT packets to the server. This action causes the server to retain these packets, consuming significant memory before authentication is complete. This can lead to a denial of service DoS...
nats-server: NATS Server: Protocol stream corruption and unintended operation injection via MQTT client subscription filters
A flaw was found in NATS Server. An authenticated MQTT client could exploit this by embedding protocol control characters within subscription filters. These characters would then be forwarded as NATS protocol data to route or leafnode connections, leading to the corruption of the protocol stream...
nats-server: NATS Server: Authentication bypass allows unauthorized access and information disclosure
A flaw was found in NATS Server, a high-performance messaging system. This vulnerability allows a client to bypass normal authentication and connection restrictions by registering as a "noauthuser" through a specific parser path. This occurs when the client's initial operation is not a standard...
nats-server: NATS Server: Denial of Service via inconsistent message trace destination checks
A flaw was found in NATS Server. Message trace destination checks, which ensure that trace events are sent to authorized subjects, were not consistently applied to messages originating from leafnode connections. This inconsistency allows a leafnode operator to bypass these checks and send trace...
nats-server: NATS Server: Information disclosure via MQTT client subscription bypass
A flaw was found in NATS Server, a high-performance messaging system. An authenticated MQTT Message Queuing Telemetry Transport client could bypass security permissions by subscribing to an internal subject family. This unauthorized access allows the client to view sensitive MQTT Quality of Servi...
nats-server: NATS Server: Information disclosure due to inconsistent MQTT topic rechecking
A flaw was found in NATS Server. This vulnerability allows for unauthorized information disclosure where MQTT messages, intended to be denied based on subscription rules, are still delivered to subscribers. This occurs because the server's delivery paths do not consistently recheck the original...
Linux Distros Unpatched Vulnerability : CVE-2026-58210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an unauthenticated MQTT client...
Linux Distros Unpatched Vulnerability : CVE-2026-58251
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user wi...
Linux Distros Unpatched Vulnerability : CVE-2026-58208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route...
Linux Distros Unpatched Vulnerability : CVE-2026-58207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client able to send...
Linux Distros Unpatched Vulnerability : CVE-2026-58214
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authenticated MQTT client coul...
Linux Distros Unpatched Vulnerability : CVE-2026-58250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with...
Linux Distros Unpatched Vulnerability : CVE-2026-58253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when noauthuser was...
Linux Distros Unpatched Vulnerability : CVE-2026-58212
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - golang-github-nats-io-nkeys - None nats-server - None Ubuntu Linux - Unknown description CVE-2026-58212 Note that Nessus relies on the presence o...
Linux Distros Unpatched Vulnerability : CVE-2026-58252
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user...
Linux Distros Unpatched Vulnerability : CVE-2026-58211
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client could be registered as t...
Linux Distros Unpatched Vulnerability : CVE-2026-58254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.8, message trace destination checks...
Linux Distros Unpatched Vulnerability : CVE-2026-58213
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include...
Linux Distros Unpatched Vulnerability : CVE-2026-58209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, MQTT retained message delivery an...
