Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-66072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw...

6CVSS5.8AI score0.0033EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/23 8:48 p.m.•16 views

CVE-2026-66072

A flaw was found in RabbitMQ. An authenticated stream client with read access to any stream can exploit a vulnerability in the getchunkselector/1 function. This function processes a client-supplied chunkselector property without proper validation, leading to an atom table exhaustion. Successful...

6.5CVSS5.8AI score0.0033EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/23 8:13 p.m.•16 views

EUVD-2026-85634

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw client-supplied property from post-auth subscribe and resolveoffsetspec frames, with no whitelist and no existing guard. An authenticated...

6CVSS5.8AI score0.0033EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 8:13 p.m.•12 views

CVE-2026-66072 RabbitMQ: Atom table exhaustion via stream `chunk_selector`

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw client-supplied property from post-auth subscribe and resolveoffsetspec frames, with no whitelist and no existing guard. An authenticated...

6CVSS5.8AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•12 views

CVE-2026-66072: Uncontrolled Resource Consumption

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw client-supplied property from post-auth subscribe and resolveoffsetspec frames, with no whitelist and no existing guard. An authenticated...

6CVSS5.8AI score0.0033EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/15 1:31 p.m.•10 views

rabbitmq-server: RabbitMQ: Denial of Service via atom table exhaustion in stream chunk_selector

A flaw was found in RabbitMQ. An authenticated stream client with read access to any stream can exploit a vulnerability in the getchunkselector/1 function. This function processes a client-supplied chunkselector property without proper validation, leading to an atom table exhaustion. Successful...

6CVSS5.8AI score0.0033EPSS
SaveExploits0References7
Rows per page
Query Builder