Lucene search
+L

12 matches found

osv_bit
osv_bit
•added 2026/10/01 9:33 a.m.•27 views

BIT-RABBITMQ-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/09/24 4:31 p.m.•23 views

SUSE CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-67231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/09/23 9:17 p.m.•35 views

UBUNTU-CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2026/09/23 9:17 p.m.•35 views

AZL-105290 CVE-2026-67231 affecting package rabbitmq-server for versions less than 3.13.7-10

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 9:17 p.m.•33 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS0.00228EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/23 9:17 p.m.•33 views

DEBIAN-CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 8:47 p.m.•17 views

CVE-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/23 8:47 p.m.•13 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/23 8:47 p.m.•59 views

CVE-2026-67231

RabbitMQ (messaging and streaming broker) is vulnerable to a TLS client-authentication bypass in versions prior to 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0. When the trust-store plugin is enabled and used as the verify_fun, the system improperly validates certificates by matching only the Issuer...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/09/23 8:47 p.m.•21 views

EUVD-2026-85664

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/23 8:47 p.m.•22 views

CVE-2026-67231

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

9.1CVSS5.9AI score0.00228EPSS
SaveExploits0
Rows per page
Query Builder