Lucene search
+L

12 matches found

SUSE CVE
SUSE CVE
•added 2026/09/24 4:31 p.m.•16 views

SUSE CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/24 1:40 p.m.•16 views

CVE-2026-66069

A flaw was found in RabbitMQ. A user with a monitoring tag, when the Management plugin is enabled, can reset the per-node authentication-attempt counters. This action, which should be restricted to administrators, allows the monitoring-tagged user to erase evidence of brute-force login attempts...

4.3CVSS5.8AI score0.00395EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-66069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 9:16 p.m.•11 views

DEBIAN-CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 9:16 p.m.•13 views

UBUNTU-CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/09/23 9:16 p.m.•19 views

CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.9AI score0.00395EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/23 8:09 p.m.•53 views

CVE-2026-66069

RabbitMQ , a messaging and streaming broker, is vulnerable to a flaw where the is_authorized/2 function incorrectly uses is_authorized_monitor for all methods prior to versions 4.1.13, 4.2.7, and 4.3.0 . This allows a user with a monitoring tag to reset per-node authentication-attempt counters vi...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/23 8:09 p.m.•19 views

CVE-2026-66069

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0
OSV
OSV
•added 2026/09/23 8:09 p.m.•11 views

CVE-2026-66069 RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.7AI score0.00395EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•9 views

PT-2026-105057

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, is authorized/2 uses is authorized monitor for all methods. DELETE resets rabbit core metrics:reset auth attempt metrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbit mgmt w...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•14 views

CVE-2026-66069: Missing Authorization

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/15 1:31 p.m.•18 views

rabbitmq-server: RabbitMQ: Monitoring user can reset authentication attempt counters

A flaw was found in RabbitMQ. A user with a monitoring tag, when the Management plugin is enabled, can reset the per-node authentication-attempt counters. This action, which should be restricted to administrators, allows the monitoring-tagged user to erase evidence of brute-force login attempts...

2.3CVSS5.8AI score0.00395EPSS
SaveExploits0References7
Rows per page
Query Builder