| RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP APICVE-2023-46118 · GHSA-W6CQ-9CF4-GQPG |
rabbit_commonRed Hat OpenStack Platform 16.1/rabbitmq-server |
HexRed Hat |
Medium
|
Fix reported |
|
| rabbitmq: RabbitMQ has XSS Vulnerability in an Error Message in Management UICVE-2025-30219 |
Red Hat OpenStack Platform 16.2/rabbitmq-serverRed Hat OpenStack Platform 17.1/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: RabbitMQ Node can log Basic Auth header from an HTTP requestCVE-2025-50200 |
Red Hat OpenStack Platform 16.2/rabbitmq-serverRed Hat OpenStack Platform 17.1/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: RabbitMQ: Unsanitized vhost names allow for XSS in management UICVE-2026-44839 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 16.2/rabbitmq-server |
Red Hat |
Low
|
No fix reported |
|
| hex: hex: Denial of Service via unconstrained data decompressionCVE-2026-96618 |
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
| hex: hex: Terminal output spoofing via unescaped control sequencesCVE-2026-81856 |
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Denial of Service via resource exhaustion in authentication mechanism handlingCVE-2026-67222 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Denial of Service via unbounded pre-authentication state accumulation in Web STOMPCVE-2026-67230 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Denial of Service via oversized stream protocol frameCVE-2026-67225 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Authentication preference persistence via invalid cookie nameCVE-2026-67234 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Low
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Cross-site scripting via unescaped OAuth token injectionCVE-2026-67237 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Denial of Service via management API atom table exhaustionCVE-2026-66073 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: RabbitMQ: Protected account deletion safeguard bypass via bulk-delete APICVE-2026-66078 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Low
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Denial of service via atom exhaustion in OAuth2 JWT scope parsingCVE-2026-66071 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Stored Cross-Site Scripting via TLS peer certificate in stream-management UICVE-2026-67239 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Unauthorized access via LDAP distinguished name injectionCVE-2026-67223 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Authentication bypass via improper validation of floating-point token expiration timestampsCVE-2026-67242 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: RabbitMQ: Unauthorized cross-vhost message access via missing Federation upstream authorizationCVE-2026-67412 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: rabbitmq-server: Denial of Service via Shovel plugin atom exhaustionCVE-2026-67415 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
| rabbitmq-server: RabbitMQ: Information disclosure via improper access control in AMQP management endpointCVE-2026-61837 |
Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server |
Red Hat |
Medium
|
No fix reported |
|
