Lucene search
+L

6 matches found

OSV
OSV
•added 2026/09/25 5:17 p.m.•4 views

DEBIAN-CVE-2026-67241

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check. pUT /exchanges/:name lines 192-240 checks only configure on the declared exchange and passes XArgs straight to rabbitexchange:declare/7. ...

4.8CVSS5.8AI score0.00347EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 4:12 p.m.•14 views

CVE-2026-67241

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check. pUT /exchanges/:name lines 192-240 checks only configure on the declared exchange and passes XArgs straight to rabbitexchange:declare/7. ...

4.8CVSS5.8AI score0.00347EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/25 4:12 p.m.•23 views

CVE-2026-67241 RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check. pUT /exchanges/:name lines 192-240 checks only configure on the declared exchange and passes XArgs straight to rabbitexchange:declare/7. ...

4.8CVSS0.00347EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/25 4:12 p.m.•2 views

EUVD-2026-87153

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check. pUT /exchanges/:name lines 192-240 checks only configure on the declared exchange and passes XArgs straight to rabbitexchange:declare/7. ...

4.8CVSS5.8AI score0.00347EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•1 views

Linux Distros Unpatched Vulnerability : CVE-2026-67241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check...

4.8CVSS5.8AI score0.00347EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•0 views

CVE-2026-57221: Missing Authorization

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP 0-9-1 operations, allowing any authenticated user who can connect to a virtual host to enumerate queue and...

5.3CVSS5.7AI score0.0041EPSS
SaveExploits1References8
Rows per page
Query Builder