https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T10:14:04.687427+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-9877 CVE-2016-9877 2026-10-06T10:14:05.230363+00:00

Affected: Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.

 https://vulnerability.circl.lu/vuln/usn-3374-1 USN-3374-1 — rabbitmq-server vulnerability 2026-10-06T10:14:05.230567+00:00

Affected: Ubuntu:14.04:LTS: rabbitmq-server, Ubuntu:16.04:LTS: rabbitmq-server

It was discovered that RabbitMQ incorrectly handled MQTT (MQ Telemetry Transport) authentication. A remote attacker could use this issue to authenticate successfully with an existing username by omitting the password.