Поиск уязвимостей
Количество 7
Количество 7
BDU:2026-09678
Уязвимость сервера системы обмена сообщениями NATS, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти существующие механизмы безопасности и повысить свои привилегии
ALT-PU-2026-10922
ALT-PU-2026-10922: package `nats-server` update to version 2.14.3-alt2
CVE-2026-58253
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and operate with the privileges associated with that connection type. This issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16.
CVE-2026-58253
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and operate with the privileges associated with that connection type. This issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16.
CVE-2026-58253
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and operate with the privileges associated with that connection type. This issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16.
CVE-2026-58253
NATS Server: Route API Auth Bypass
CVE-2026-58253
NATS Server is a high-performance server for NATS.io, the cloud and ed ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-09678 Уязвимость сервера системы обмена сообщениями NATS, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти существующие механизмы безопасности и повысить свои привилегии | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-10922 ALT-PU-2026-10922: package `nats-server` update to version 2.14.3-alt2 | CVSS3: 8.8 | 4 месяца назад | |
 | CVE-2026-58253 NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and operate with the privileges associated with that connection type. This issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58253 NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and operate with the privileges associated with that connection type. This issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58253 NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and operate with the privileges associated with that connection type. This issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16. | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58253 NATS Server: Route API Auth Bypass | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
| CVE-2026-58253 NATS Server is a high-performance server for NATS.io, the cloud and ed ... | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу