Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

43364 matches found

NVD
NVD•added 2026/09/25 5:17 p.m.•24 views

CVE-2026-67239

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

7.6CVSS0.00154EPSS
SaveExploits0References3
osv_debian
osv_debian•added 2026/09/25 5:17 p.m.•25 views

DEBIAN-CVE-2026-67237

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or accesstoken cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the...

9.3CVSS6.2AI score0.00452EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/25 5:17 p.m.•16 views

CVE-2026-67237

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or accesstoken cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the...

9.3CVSS0.00452EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve•added 2026/09/25 5:17 p.m.•16 views

CVE-2026-67410

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...

8.2CVSS5.8AI score0.00408EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve•added 2026/09/25 5:17 p.m.•17 views

CVE-2026-67239

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

7.6CVSS5.8AI score0.00154EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve•added 2026/09/25 5:17 p.m.•14 views

CVE-2026-67421

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

6.8CVSS5.7AI score0.0028EPSS
SaveExploits1References5
osv_ubuntu
osv_ubuntu•added 2026/09/25 5:17 p.m.•19 views

UBUNTU-CVE-2026-67410

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...

8.2CVSS5.8AI score0.00408EPSS
SaveExploits1References7
osv_ubuntu
osv_ubuntu•added 2026/09/25 5:17 p.m.•24 views

UBUNTU-CVE-2026-67237

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or accesstoken cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the...

9.3CVSS6.2AI score0.00452EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu•added 2026/09/25 5:17 p.m.•19 views

UBUNTU-CVE-2026-67421

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

6.8CVSS5.7AI score0.0028EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve•added 2026/09/25 5:17 p.m.•17 views

CVE-2026-67237

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or accesstoken cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the...

9.3CVSS6.2AI score0.00452EPSS
SaveExploits0References7
Mend
Mend•added 2026/09/25 4:39 p.m.•11 views

CVE-2026-67421

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

6.8CVSS5.7AI score0.0028EPSS
SaveExploits1References5
CVE
CVE•added 2026/09/25 4:39 p.m.•36 views

CVE-2026-67421

The messaging broker RabbitMQ is vulnerable to a stored HTML injection in the Management UI when the OAuth UI is enabled. Specifically, versions 3.13.0 to 3.13.18 , 4.0.23 , 4.1.14 , 4.2.9 , and 4.3.4 may render an AMQP authorization-error reason as HTML if it contains an attacker-controlled queu...

6.8CVSS5.7AI score0.0028EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve•added 2026/09/25 4:39 p.m.•20 views

CVE-2026-67421 RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

4.5CVSS5.7AI score0.0028EPSS
SaveExploits1References5
Cvelist
Cvelist•added 2026/09/25 4:32 p.m.•49 views

CVE-2026-67410 RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...

8.2CVSS0.00408EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment•added 2026/09/25 4:32 p.m.•31 views

CVE-2026-67410 RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...

8.2CVSS5.8AI score0.00408EPSS
SaveExploits1References5
Mend
Mend•added 2026/09/25 4:32 p.m.•13 views

CVE-2026-67410

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint CWE-200. when OAuth2 authentication is enabled for the RabbitMQ Management UI and the configured flow, IDP use a client secret, the oauthclientsecre...

8.2CVSS5.8AI score0.00408EPSS
SaveExploits1References7
osv_cve
osv_cve•added 2026/09/25 4:13 p.m.•26 views

CVE-2026-67239 RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

7.6CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist•added 2026/09/25 4:13 p.m.•65 views

CVE-2026-67239 RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

7.6CVSS0.00154EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/09/25 4:13 p.m.•17 views

EUVD-2026-87154

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

7.6CVSS5.8AI score0.00154EPSS
SaveExploits0References3
Mend
Mend•added 2026/09/25 4:13 p.m.•10 views

CVE-2026-67239

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

8.1CVSS5.8AI score0.00154EPSS
SaveExploits0References5
Rows per page
Query Builder