Lucene search
+L

642 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-67231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/23 9:17 p.m.•32 views

DEBIAN-CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/09/23 9:17 p.m.•35 views

UBUNTU-CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2026/09/23 9:17 p.m.•34 views

AZL-105290 CVE-2026-67231 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/23 9:17 p.m.•24 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/23 9:17 p.m.•30 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS0.00228EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/23 8:47 p.m.•12 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/09/23 8:47 p.m.•21 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/09/23 8:47 p.m.•29 views

CVE-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/23 8:47 p.m.•47 views

CVE-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS0.00228EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/23 8:47 p.m.•20 views

EUVD-2026-85664

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/23 8:47 p.m.•56 views

CVE-2026-67231

RabbitMQ (messaging and streaming broker) is vulnerable to a TLS client-authentication bypass in versions prior to 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0. When the trust-store plugin is enabled and used as the verify_fun, the system improperly validates certificates by matching only the Issuer...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/23 8:47 p.m.•17 views

CVE-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•12 views

PT-2026-97583

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.15 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.3.0 Description An issue exists in the trust-store plugin where the verify fun...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References31
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•23 views

CVE-2026-67231: Improper Certificate Validation

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•17 views

PT-2026-105042

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verify fun that overrides bad cert, unknown ca / bad cert, selfsigned peer when the presented cert "matches" a whitelisted one. The match key is extract...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/16 12:31 a.m.•26 views

EUVD-2026-80012

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS5.7AI score0.00589EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/15 10:17 p.m.•37 views

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS0.00589EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/15 9:31 p.m.•27 views

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS5.8AI score0.00589EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/15 9:31 p.m.•58 views

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS0.00589EPSS
SaveExploits0References3
Rows per page
Query Builder