rabbitmq vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20221
3. 20232
4. 20241
5. 20252
6. 202692

Newest CVEs

• CVE-2026-67418

  RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

  rabbitmq · rabbitmq-server

  Medium5.3
• CVE-2026-67414

  RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation

  rabbitmq · rabbitmq-server

  Medium6.0
• CVE-2026-67416

  RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation

  rabbitmq · rabbitmq-server

  Medium5.3
• CVE-2026-107386

  amqp091-go: Pre-negotiation frame limit is not enforced to 4KB

  rabbitmq · amqp091-go

  Medium6.3
• CVE-2026-106123

  RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()

  rabbitmq · rabbitmq-java-client

  Medium5.7
• CVE-2026-106122

  RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

  rabbitmq · rabbitmq-java-client

  Medium6.0
• CVE-2026-106121

  RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS

  rabbitmq · rabbitmq-java-client

  Medium4.9
• CVE-2026-67420

  RabbitMQ OAuth credential refresh retains revoked runtime tags

  rabbitmq · rabbitmq-server

  Low2.3
• CVE-2026-67419

  RabbitMQ: Consecutive topic wildcards cause combinatorial routing work

  rabbitmq · rabbitmq-server

  High7.1
• CVE-2026-67421

  RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

  rabbitmq · rabbitmq-server

  Medium4.5