Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-67231 critical 9.1 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a... 2026-10-19
CVE-2026-67229 medium 4.9 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_vhost/2 calls rabbit_data_coe... 2026-10-19
CVE-2026-108449 high 8.8 No Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 2026-10-19
CVE-2026-67224 medium 4.9 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the... 2026-10-19
CVE-2026-67221 medium 4.9 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls amqp_... 2026-10-19
CVE-2026-67220 medium 6.5 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms... 2026-10-19
CVE-2026-67219 medium 6.5 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add_binding/3 parses the routing... 2026-10-19
CVE-2026-67218 medium 6.5 No RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls rabbit_s... 2026-10-19
CVE-2026-66080 medium 4.9 No RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.11, 4.2.6, and 4.3.0, validate_partitions only checks that the requested... 2026-10-19
CVE-2026-66077 medium 6.1 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which... 2026-10-19
CVE-2026-66075 medium 5.4 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, is_authorized/2 for the /federati... 2026-10-19
CVE-2026-108450 high 8.8 No Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 2026-10-19
CVE-2026-66074 medium 6.5 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, match_value/3 passes the user-sup... 2026-10-19
CVE-2026-66072 medium 6.5 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, get_chunk_selector/1 calls binary... 2026-10-19
CVE-2026-66068 medium 4.4 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOG_DEBUG("shutting down Shovel... 2026-10-19
CVE-2026-66079 high 7.5 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parse_array_primitive/2 for constructor... 2026-10-19
CVE-2026-66076 medium 6.5 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, is_authorized/2 calls rabbit_mgmt... 2026-10-19
CVE-2026-66070 high 8.8 No RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflect... 2026-10-19
CVE-2026-108451 high 8.8 No Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 2026-10-19
CVE-2026-63002 medium 4.8 No REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in $diff... 2026-10-19