CVE-2026-57214

🗓️ 10 Jul 2026 21:16:00Reported by ubuntu.comType

ubuntucve

ubuntucve🔗 ubuntu.com👁 5 Views

CVE-2026-57214: RabbitMQ management UI XSS via unescaped title on queues and exchanges; fixed in 4.2.5.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-57214	11 Jul 202602:22	–	circl
CVE	CVE-2026-57214	10 Jul 202620:18	–	cve
Cvelist	CVE-2026-57214 RabbitMQ: Stored XSS in RabbitMQ management UI	10 Jul 202620:18	–	cvelist
EUVD	EUVD-2026-43017	10 Jul 202620:18	–	euvd
NVD	CVE-2026-57214	10 Jul 202621:16	–	nvd
OSV	CVE-2026-57214 RabbitMQ: Stored XSS in RabbitMQ management UI	10 Jul 202620:18	–	osv
OSV	UBUNTU-CVE-2026-57214	10 Jul 202621:16	–	osv
Positive Technologies	PT-2026-57299	10 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-57214	15 Jul 202605:02	–	susecve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-57214	13 Jul 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	16.04	all	rabbitmq-server	0	rabbitmq-server_0_all.deb
Ubuntu	18.04	all	rabbitmq-server	0	rabbitmq-server_0_all.deb
Ubuntu	20.04	all	rabbitmq-server	0	rabbitmq-server_0_all.deb
Ubuntu	22.04	all	rabbitmq-server	0	rabbitmq-server_0_all.deb
Ubuntu	24.04	all	rabbitmq-server	0	rabbitmq-server_0_all.deb
Ubuntu	26.04	all	rabbitmq-server	0	rabbitmq-server_0_all.deb

Source	Link
cve	www.cve.org/CVERecord
github	www.github.com/rabbitmq/rabbitmq-server/commit/b0027b6c1ae5b869d876e211efe6189ffd92b5c2
github	www.github.com/rabbitmq/rabbitmq-server/commit/b267a290dd89e42c6e0256f46fc273a8adb7f3ec
github	www.github.com/rabbitmq/rabbitmq-server/pull/15606
github	www.github.com/rabbitmq/rabbitmq-server/pull/15608
github	www.github.com/rabbitmq/rabbitmq-server/releases/tag/v4.2.5
github	www.github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-6jfq-prw2-7rwp

16 Jul 2026 10:56Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.4

CVSS 47.1

EPSS0.00219

SSVC

rabbitmq management ui cross site scripting unescaped title queues exchanges four two five