HIGH

CVE-2026-57219 RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations

Microsoft Security Response Center • Jul 15, 2026

HIGH

CVE-2026-57220 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS

Microsoft Security Response Center • Jul 15, 2026

MEDIUM

CVE-2026-57217 RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass

Microsoft Security Response Center • Jul 15, 2026

MEDIUM

CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering

Microsoft Security Response Center • Jul 15, 2026

MEDIUM

CVE-2026-57216 RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks

Microsoft Security Response Center • Jul 15, 2026

HIGH

CVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on Windows

Microsoft Security Response Center • Jul 15, 2026

HIGH

CVE-2026-57215 RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom

Microsoft Security Response Center • Jul 15, 2026

HIGH

RabbitMQ fixes flaw that allowed broker takeover via OAuth secret disclosure

SC Media • Jul 14, 2026

CRITICAL

RabbitMQ flaws expose OAuth secrets, risk complete takeover of the broker

CSO Online • Jul 13, 2026

MEDIUM

[NEU] [mittel] RabbitMQ: Mehrere Schwachstellen

BSI Germany • Jun 18, 2026

MEDIUM

[UPDATE] [mittel] RabbitMQ: Schwachstelle ermöglicht Offenlegung von Informationen

BSI Germany • Jun 17, 2026

HIGH

USN-8437-1: rabbitmq-c vulnerabilities

Ubuntu Security • Jun 16, 2026