CVE-2026-25768

CVE-2026-25768 affects LavinMQ prior to 2.6.6, where an authenticated user could access broker metadata they should not access. The issue is a authorization flaw in the broker exposing sensitive metadata. The vulnerability is fixed in 2.6.6; affected deployments should upgrade to 2.6.6 or newer t...

CVE-2026-25767

Technical details beyond what is in the Initial Description are not provided in the supplied documents. Monitor for updates for affected versions, impact, and remediation.