Lucene search
+L

4 matches found

OSV
OSV
•added 2026/09/23 9:16 p.m.•4 views

DEBIAN-CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.7AI score0.00395EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 8:09 p.m.•28 views

CVE-2026-66069 RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS0.00395EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/23 8:09 p.m.•7 views

CVE-2026-66069

RabbitMQ , a messaging and streaming broker, is vulnerable to a flaw where the is_authorized/2 function incorrectly uses is_authorized_monitor for all methods prior to versions 4.1.13, 4.2.7, and 4.3.0 . This allows a user with a monitoring tag to reset per-node authentication-attempt counters vi...

2.3CVSS5.7AI score0.00395EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/23 8:09 p.m.•4 views

CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.7AI score0.00395EPSS
SaveExploits0
Rows per page
Query Builder