RabbitMQ security vulnerabilities
Open-source infrastructure. Public CVE monitoring for RabbitMQ. Vendor security advisories are linked on this page.
Built for Operators of this product.
52 public records · 0 security-fix timeline events. 0 published in the last 7 days. 36 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 2
- High 12
- Medium 14
- Low 1
2026-08-0529 issues2026-11-02
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- Medium5.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.40%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.62%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.63%Oct 14, 2026
- Medium5.5RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()Check if you run itEPSS 0.24%Oct 7, 2026
- MediumRabbitMQ OAuth credential refresh retains revoked runtime tagsCheck if you run itEPSS 0.27%Oct 1, 2026
- HighRabbitMQ: Consecutive topic wildcards cause combinatorial routing workCheck if you run itEPSS 0.37%Oct 1, 2026
- MediumRabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of ServiceCheck if you run itEPSS 0.38%Oct 1, 2026
- MediumRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCheck if you run itEPSS 0.49%Oct 1, 2026
- HighRabbitMQ: Incomplete fix for CVE-2026-44838: does not escape , leaving room for an MQTT topic permission bypassCheck if you run itEPSS 0.26%Oct 1, 2026
- MediumRabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_statusCheck if you run itEPSS 0.34%Oct 1, 2026