https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T16:25:58.649045+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-59272 CVE-2026-59272 — Log4j2 AmqpAppender disables TLS hostname verification by default 2026-09-30T16:25:58.779014+00:00

Affected: Spring AMQP

Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier