OPENSUSE-SU-2026:21903-1
Vulnerability from csaf_opensuse - Published: 2026-09-22 02:16 - Updated: 2026-09-24 17:48Summary
Security update for rabbitmq-server
Severity
Important
Notes
Title of the patch: Security update for rabbitmq-server
Description of the patch: This update for rabbitmq-server fixes the following issues:
- CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465).
- CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_request
paths (bsc#1271318).
- CVE-2026-57213: stored XSS in RabbitMQ federation management plugin via unsanitized consumer_tag rendering
(bsc#1271336).
- CVE-2026-57214: stored XSS in RabbitMQ management UI (bsc#1271337).
- CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent
phantom (bsc#1271338).
- CVE-2026-57216: stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address
loopback checks (bsc#1271339).
- CVE-2026-57217: topic authorization can lead to cross-tenant routing-key bypass (bsc#1271340).
- CVE-2026-57218: consumer persistence can lead to post-revocation message disclosure in OAuth2 (bsc#1271343).
- CVE-2026-57219: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less
common OAuth 2 configurations (bsc#1271344).
- CVE-2026-57220: stream listener does not enforce configured frame-size limit during authentication, permitting
unauth'd mem-exhaust DoS (bsc#1271345).
- CVE-2026-57221: passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to
unprivileged users (bsc#1271346).
Patchnames: openSUSE-Leap-16.0-1731
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.2 (Medium)
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
8.7 (High)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
important
7.5 (High)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
14 products, the same list as for
CVE-2026-44839
Threats
Impact
moderate
References
47 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rabbitmq-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rabbitmq-server fixes the following issues:\n\n- CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465).\n- CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_request\n paths (bsc#1271318).\n- CVE-2026-57213: stored XSS in RabbitMQ federation management plugin via unsanitized consumer_tag rendering\n (bsc#1271336).\n- CVE-2026-57214: stored XSS in RabbitMQ management UI (bsc#1271337).\n- CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent\n phantom (bsc#1271338).\n- CVE-2026-57216: stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address\n loopback checks (bsc#1271339).\n- CVE-2026-57217: topic authorization can lead to cross-tenant routing-key bypass (bsc#1271340).\n- CVE-2026-57218: consumer persistence can lead to post-revocation message disclosure in OAuth2 (bsc#1271343).\n- CVE-2026-57219: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less\n common OAuth 2 configurations (bsc#1271344).\n- CVE-2026-57220: stream listener does not enforce configured frame-size limit during authentication, permitting\n unauth\u0027d mem-exhaust DoS (bsc#1271345).\n- CVE-2026-57221: passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to\n unprivileged users (bsc#1271346).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1731",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21903-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1266465",
"url": "https://bugzilla.suse.com/1266465"
},
{
"category": "self",
"summary": "SUSE Bug 1271318",
"url": "https://bugzilla.suse.com/1271318"
},
{
"category": "self",
"summary": "SUSE Bug 1271336",
"url": "https://bugzilla.suse.com/1271336"
},
{
"category": "self",
"summary": "SUSE Bug 1271337",
"url": "https://bugzilla.suse.com/1271337"
},
{
"category": "self",
"summary": "SUSE Bug 1271338",
"url": "https://bugzilla.suse.com/1271338"
},
{
"category": "self",
"summary": "SUSE Bug 1271339",
"url": "https://bugzilla.suse.com/1271339"
},
{
"category": "self",
"summary": "SUSE Bug 1271340",
"url": "https://bugzilla.suse.com/1271340"
},
{
"category": "self",
"summary": "SUSE Bug 1271343",
"url": "https://bugzilla.suse.com/1271343"
},
{
"category": "self",
"summary": "SUSE Bug 1271344",
"url": "https://bugzilla.suse.com/1271344"
},
{
"category": "self",
"summary": "SUSE Bug 1271345",
"url": "https://bugzilla.suse.com/1271345"
},
{
"category": "self",
"summary": "SUSE Bug 1271346",
"url": "https://bugzilla.suse.com/1271346"
},
{
"category": "self",
"summary": "SUSE Bug 1279938",
"url": "https://bugzilla.suse.com/1279938"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44839 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57212 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57213 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57214 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57215 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57216 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57217 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57218 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57219 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57220 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-57221 page",
"url": "https://www.suse.com/security/cve/CVE-2026-57221/"
}
],
"title": "Security update for rabbitmq-server",
"tracking": {
"current_release_date": "2026-09-24T17:48:13Z",
"generator": {
"date": "2026-09-22T02:16:57Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21903-1",
"initial_release_date": "2026-09-22T02:16:57Z",
"revision_history": [
{
"date": "2026-09-22T02:16:57Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-24T17:48:13Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"product": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"product_id": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/erlang-rabbitmq-client@4.1.5-160000.2.1?arch=aarch64\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"product": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"product_id": "rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server@4.1.5-160000.2.1?arch=aarch64\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"product": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"product_id": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server-plugins@4.1.5-160000.2.1?arch=aarch64\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"product": {
"name": "rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"product_id": "rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server-bash-completion@4.1.5-160000.2.1?arch=noarch\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch",
"product": {
"name": "rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch",
"product_id": "rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server-zsh-completion@4.1.5-160000.2.1?arch=noarch\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"product": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"product_id": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/erlang-rabbitmq-client@4.1.5-160000.2.1?arch=ppc64le\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"product": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"product_id": "rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server@4.1.5-160000.2.1?arch=ppc64le\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"product": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"product_id": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server-plugins@4.1.5-160000.2.1?arch=ppc64le\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"product": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"product_id": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/erlang-rabbitmq-client@4.1.5-160000.2.1?arch=s390x\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"product": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"product_id": "rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server@4.1.5-160000.2.1?arch=s390x\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"product": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"product_id": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server-plugins@4.1.5-160000.2.1?arch=s390x\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"product": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"product_id": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/erlang-rabbitmq-client@4.1.5-160000.2.1?arch=x86_64\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"product": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"product_id": "rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server@4.1.5-160000.2.1?arch=x86_64\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"product": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"product_id": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:vmware:rabbitmq:4.1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/rabbitmq-server-plugins@4.1.5-160000.2.1?arch=x86_64\u0026upstream=rabbitmq-server-0:4.1.5-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64"
},
"product_reference": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le"
},
"product_reference": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x"
},
"product_reference": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64"
},
"product_reference": "erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64"
},
"product_reference": "rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le"
},
"product_reference": "rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x"
},
"product_reference": "rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-0:4.1.5-160000.2.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64"
},
"product_reference": "rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch"
},
"product_reference": "rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64"
},
"product_reference": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le"
},
"product_reference": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x"
},
"product_reference": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64"
},
"product_reference": "rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
},
"product_reference": "rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44839"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44839",
"url": "https://www.suse.com/security/cve/CVE-2026-44839"
},
{
"category": "external",
"summary": "SUSE Bug 1266465 for CVE-2026-44839",
"url": "https://bugzilla.suse.com/1266465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-44839"
},
{
"cve": "CVE-2026-57212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57212"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_request paths because read_complete_body checks the accumulated size before the final chunk but not the final combined size. This issue is fixed in versions 3.13.14, 4.0.19, 4.1.10, and 4.2.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57212",
"url": "https://www.suse.com/security/cve/CVE-2026-57212"
},
{
"category": "external",
"summary": "SUSE Bug 1271318 for CVE-2026-57212",
"url": "https://bugzilla.suse.com/1271318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57212"
},
{
"cve": "CVE-2026-57213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57213"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_federation_management plugin renders the consumer_tag field on the Federation Status page without HTML escaping, allowing a user who can configure a federation upstream or policy to execute JavaScript in the browser of a user viewing that page. This issue is fixed in versions 3.13.14, 4.0.19, 4.1.10, and 4.2.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57213",
"url": "https://www.suse.com/security/cve/CVE-2026-57213"
},
{
"category": "external",
"summary": "SUSE Bug 1271336 for CVE-2026-57213",
"url": "https://bugzilla.suse.com/1271336"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57213"
},
{
"cve": "CVE-2026-57214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57214"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange to execute JavaScript in another user\u0027s browser. This issue is fixed in version 4.2.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57214",
"url": "https://www.suse.com/security/cve/CVE-2026-57214"
},
{
"category": "external",
"summary": "SUSE Bug 1271337 for CVE-2026-57214",
"url": "https://bugzilla.suse.com/1271337"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57214"
},
{
"cve": "CVE-2026-57215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57215"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ allows foreign bindings to amq.rabbitmq.reply-to destinations because volatile direct-reply-to queues can be accepted at bind and route time but are missing from Khepri-backed deletion checks, leaving persistent route entries after unbind. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57215",
"url": "https://www.suse.com/security/cve/CVE-2026-57215"
},
{
"category": "external",
"summary": "SUSE Bug 1271338 for CVE-2026-57215",
"url": "https://bugzilla.suse.com/1271338"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57215"
},
{
"cve": "CVE-2026-57216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57216"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9-1, AMQP 1.0, and Stream Protocol authentication can allow a loopback-restricted user such as guest to connect remotely when traffic is accepted through a trusted PROXY-protocol path and the backend listener is loopback-bound because the loopback check uses the listener-side socket address instead of the real client source. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57216",
"url": "https://www.suse.com/security/cve/CVE-2026-57216"
},
{
"category": "external",
"summary": "SUSE Bug 1271339 for CVE-2026-57216",
"url": "https://bugzilla.suse.com/1271339"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57216"
},
{
"cve": "CVE-2026-57217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57217"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, and 4.2.6, RabbitMQ topic authorization can allow restricted topic writes and binds during metadata-store failures because topic-permission lookup errors from Khepri can collapse to undefined, which the internal backend treats as allow. This issue is fixed in versions 3.13.15, 4.0.21, 4.1.11, and 4.2.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57217",
"url": "https://www.suse.com/security/cve/CVE-2026-57217"
},
{
"category": "external",
"summary": "SUSE Bug 1271340 for CVE-2026-57217",
"url": "https://bugzilla.suse.com/1271340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57217"
},
{
"cve": "CVE-2026-57218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57218"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57218",
"url": "https://www.suse.com/security/cve/CVE-2026-57218"
},
{
"category": "external",
"summary": "SUSE Bug 1271343 for CVE-2026-57218",
"url": "https://bugzilla.suse.com/1271343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57218"
},
{
"cve": "CVE-2026-57219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57219"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the obsolete GET /api/auth endpoint can disclose the OAuth 2 client secret on RabbitMQ installations configured with management.oauth_client_secret, exposing credentials to unauthenticated callers when the management plugin and that OAuth configuration are enabled. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57219",
"url": "https://www.suse.com/security/cve/CVE-2026-57219"
},
{
"category": "external",
"summary": "SUSE Bug 1271344 for CVE-2026-57219",
"url": "https://bugzilla.suse.com/1271344"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "important"
}
],
"title": "CVE-2026-57219"
},
{
"cve": "CVE-2026-57220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57220"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener does not enforce the configured stream frame-size limit while assembling frames during authentication and before Tune negotiation, allowing an unauthenticated remote client to declare oversized frame lengths and consume broker memory in rabbit_stream_core. This issue is fixed in version 4.2.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57220",
"url": "https://www.suse.com/security/cve/CVE-2026-57220"
},
{
"category": "external",
"summary": "SUSE Bug 1271345 for CVE-2026-57220",
"url": "https://bugzilla.suse.com/1271345"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "important"
}
],
"title": "CVE-2026-57220"
},
{
"cve": "CVE-2026-57221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-57221"
}
],
"notes": [
{
"category": "general",
"text": "RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP 0-9-1 operations, allowing any authenticated user who can connect to a virtual host to enumerate queue and exchange names and read queue message and consumer counts. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-57221",
"url": "https://www.suse.com/security/cve/CVE-2026-57221"
},
{
"category": "external",
"summary": "SUSE Bug 1271346 for CVE-2026-57221",
"url": "https://bugzilla.suse.com/1271346"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:erlang-rabbitmq-client-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-bash-completion-0:4.1.5-160000.2.1.noarch",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.aarch64",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.ppc64le",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.s390x",
"openSUSE Leap 16.0:rabbitmq-server-plugins-0:4.1.5-160000.2.1.x86_64",
"openSUSE Leap 16.0:rabbitmq-server-zsh-completion-0:4.1.5-160000.2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-22T02:16:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-57221"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…