Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 6

Количество 6

ubuntu логотип

CVE-2026-57218

4 месяца назад

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2026-57218

4 месяца назад

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2026-57218

4 месяца назад

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2026-57218

4 месяца назад

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-wmrr-4h5v-5ch7

4 месяца назад

AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21903-1

около 1 месяца назад

Security update for rabbitmq-server

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-57218

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.

CVSS3: 6.5
0%
Низкий
4 месяца назад
redhat логотип
CVE-2026-57218

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.

CVSS3: 6.5
0%
Низкий
4 месяца назад
nvd логотип
CVE-2026-57218

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.

CVSS3: 6.5
0%
Низкий
4 месяца назад
debian логотип
CVE-2026-57218

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ ...

CVSS3: 6.5
0%
Низкий
4 месяца назад
github логотип
GHSA-wmrr-4h5v-5ch7

AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure

0%
Низкий
4 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21903-1

Security update for rabbitmq-server

около 1 месяца назад

Уязвимостей на страницу