Skip to content
Threat Feed
Subscribe

Vendor

RabbitMQ

3 briefs RSS
low advisory

RabbitMQ Topic Authorization Bypass via Cross-Tenant Routing-Key Vulnerability

CVE-2026-57217 details a vulnerability in RabbitMQ where topic authorization can be bypassed, leading to cross-tenant routing-key bypass, potentially allowing unauthorized access to or manipulation of routing keys in a multi-tenant environment.

RabbitMQ vulnerability authorization-bypass
1c
low advisory

RabbitMQ Stream Listener Vulnerability CVE-2026-57220 Allows Unauthenticated Memory Exhaustion DoS

A denial-of-service vulnerability, CVE-2026-57220, exists in the RabbitMQ stream listener that allows an unauthenticated attacker to exhaust memory resources by not properly enforcing frame-size limits during authentication, leading to service disruption.

RabbitMQ Stream listener denial-of-service vulnerability rabbitmq
1t 1c
medium threat

CVE-2026-44839: RabbitMQ Management UI XSS via Unsanitized vhost Names

CVE-2026-44839 is a cross-site scripting (XSS) vulnerability in the RabbitMQ management UI that arises from unsanitized virtual host (vhost) names, potentially allowing an attacker to execute arbitrary JavaScript in the context of a user's browser.

RabbitMQ xss cve-2026-44839 web-application
2r 1t 1c