CVE-2026-57218 RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.updatesecret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after...

CVE-2026-57218

RabbitMQ AMQP 0-9-1 vulnerability (CVE-2026-57218) allows an existing consumer to continue receiving messages after OAuth token expiry or update_secret refresh, due to channel user state changes not triggering reauthorization at delivery time. Root cause: existing consumers are not canceled or re...

CVE-2026-57218 RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.updatesecret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after...

CVE-2026-57218 RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.updatesecret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after...

CVE-2026-58661

creationtimestamp| type| source ---|---|--- 2026-07-10 20:21:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxy5ayys2x 2026-07-13 23:47:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkuvklvvh2c 2026-07-16 08:13:00+00:00| seen|...

CVE-2026-55464

creationtimestamp| type| source ---|---|--- 2026-07-10 20:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxhgdnd325 2026-07-11 01:12:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdibdxcnr22...

CVE-2026-55472

creationtimestamp| type| source ---|---|--- 2026-07-10 20:10:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxdteayy2z 2026-07-11 01:02:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhp6pnjy2y 2026-07-14 04:11:02+00:00| seen|...

CVE-2026-53450

creationtimestamp| type| source ---|---|--- 2026-07-10 20:02:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcwvpqku22i 2026-07-11 01:02:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhogqben2e...

CVE-2025-3110

creationtimestamp| type| source ---|---|--- 2026-07-10 20:02:11+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqcwvoh5dv26...

CVE-2026-61460

creationtimestamp| type| source ---|---|--- 2026-07-10 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcwtdtmiu2w 2026-07-10 20:46:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqczegkuia2x 2026-07-11 01:00:28+00:00| seen|...

CVE-2026-61459

creationtimestamp| type| source ---|---|--- 2026-07-10 20:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcwt4rkti2r 2026-07-10 20:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxkwmxco2h 2026-07-10 20:51:13+00:00| seen|...

CVE-2026-15283

creationtimestamp| type| source ---|---|--- 2026-07-10 19:55:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwiu4xlp2x...

CVE-2026-43752

creationtimestamp| type| source ---|---|--- 2026-07-10 19:04:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqctoyn4qp2f...

CVE-2026-49256

creationtimestamp| type| source ---|---|--- 2026-07-10 18:52:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcszp52g62d...

CVE-2026-5801

creationtimestamp| type| source ---|---|--- 2026-07-10 18:52:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsycg2de25 2026-07-10 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcwsvtxff2d 2026-07-10 20:41:14+00:00| seen|...

CVE-2026-59151

creationtimestamp| type| source ---|---|--- 2026-07-10 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsuscyeq2z 2026-07-10 20:36:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcysjpafd2g 2026-07-11 01:13:41+00:00| seen|...

CVE-2026-15299

creationtimestamp| type| source ---|---|--- 2026-07-10 18:47:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcspog65f2c...

Malicious code in paysafe-fraud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a596646a3604e01bef558573fc7199a2b9e9cc07ab7edae1b7e445d2e2b860b6 Package advertises itself as the 'Paysafe Fraud Prevention SDK' name paysafe-fraud, repo github.com/paysafe/paysafe-fraud but the exported...

CVE-2026-1667

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Arbitrary Post Creation and Stored Cross-Site Scripting in all versions up to, and including, 14.0.0 due to a leak of an API token and insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

WordPress WP Easy Pay – Payment and Donation form Builder for Square plugin <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Status Modification vulnerability discovered by PRISM in WordPress Plugin WP EasyPay versions = 4.5.0...