Lucene search
+L

14 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-77405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/17 5:04 p.m.•15 views

EUVD-2026-80818

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/17 5:04 p.m.•11 views

GHSA-33MJ-CW25-M34H RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

Summary A structural security weakness exists in the AMQP client's TLS configuration generator tlsConfigFromURI. When constructing a tls.Config object from an amqps:// connection URI, the library initializes the structure without explicitly defining the MinVersion field. While modern versions of...

9.4CVSS5.8AI score0.00282EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/17 5:04 p.m.•19 views

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

Summary A structural security weakness exists in the AMQP client's TLS configuration generator tlsConfigFromURI. When constructing a tls.Config object from an amqps:// connection URI, the library initializes the structure without explicitly defining the MinVersion field. While modern versions of...

9.4CVSS5.8AI score0.00282EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/09/16 3:17 p.m.•9 views

AZL-103284 CVE-2026-77405 affecting package telegraf 1.31.0-33

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•11 views

DEBIAN-CVE-2026-77405

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 3:17 p.m.•14 views

CVE-2026-77405

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS0.00282EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/09/16 2:42 p.m.•15 views

CVE-2026-77405

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/16 2:42 p.m.•13 views

CVE-2026-77405 RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/16 2:42 p.m.•17 views

CVE-2026-77405 RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS5.7AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/16 2:42 p.m.•45 views

CVE-2026-77405

RabbitMQ amqp091-go (a Go AMQP 0.9.1 client) has a missing TLS minimum version enforcement in tlsConfigFromURI within uri.go. Prior to 1.13.0 , the function creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/16 2:42 p.m.•41 views

CVE-2026-77405 RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS0.00282EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•5 views

CVE-2026-77405: Inadequate Encryption Strength

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates tls.Config values without setting MinVersion to tls.VersionTLS12. Builds using a Go runtime whose default permits TLS 1.0 or TLS 1.1 can therefore negotiate an obsolete protocol version when...

9.4CVSS5.9AI score0.00282EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•4 views

PT-2026-93795

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A security weakness exists in the tlsConfigFromURI function within uri.go when constructing a tls.Config object from an amqps:// connection URI. The library fails to explicitly set the...

9.4CVSS5.8AI score0.00282EPSS
SaveExploits0References19
Rows per page
Query Builder