Lucene search
+L

11 matches found

OSV
OSV
•added 2026/10/01 9:33 a.m.•9 views

BIT-RABBITMQ-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/09/24 4:31 p.m.•22 views

SUSE CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-67231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 9:17 p.m.•18 views

AZL-105290 CVE-2026-67231 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 9:17 p.m.•24 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS0.00249EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/23 9:17 p.m.•18 views

DEBIAN-CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/23 9:17 p.m.•14 views

UBUNTU-CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/23 8:47 p.m.•14 views

CVE-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/23 8:47 p.m.•51 views

CVE-2026-67231

RabbitMQ (messaging and streaming broker) is vulnerable to a TLS client-authentication bypass in versions prior to 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0. When the trust-store plugin is enabled and used as the verify_fun, the system improperly validates certificates by matching only the Issuer...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/23 8:47 p.m.•19 views

EUVD-2026-85664

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/23 8:47 p.m.•21 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00249EPSS
SaveExploits0
Rows per page
Query Builder