Known vulnerabilities in rabbitmq-server (Ubuntu package) 4.0.5-10ubuntu5.1

Version: 4.0.5-10ubuntu5.1
Software CPE: cpe:2.3:o:canonical:rabbitmq-server_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting rabbitmq-server (Ubuntu package) version 4.0.5-10ubuntu5.1 rabbitmq-server (Ubuntu package) 4.0.5-10ubuntu5.1 is affected by 12 vulnerabilities: 3 high, 6 medium, 3 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139296 - Unchecked Return Value
CVE-2026-67409
CWE-252 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 24.07.2026 SB2026072454
SB20260928420
SB20260928421
and 1 more
#VU139288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-67239
CWE-79 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 24.07.2026 SB2026072454
SB2026103124
#VU137289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-67237
CWE-79 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 10.07.2026 SB2026071004
SB2026103124
#VU137288 - Cleartext Storage of Sensitive Information
CVE-2026-67236
CWE-312 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 10.07.2026 SB2026071004
SB2026103124
#VU137258 - Allocation of Resources Without Limits or Throttling
CVE-2026-67235
CWE-770 Low
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137254 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-66077
CWE-79 Low
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137252 - Allocation of Resources Without Limits or Throttling
CVE-2026-66079
CWE-770 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137251 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-67232
CWE-409 Medium
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137250 - Improper Certificate Validation
CVE-2026-67231
CWE-295 High
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137242 - Improper Certificate Validation
CVE-2026-67404
CWE-295 High
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137235 - Overly Permissive Cross-domain Whitelist
CVE-2026-66070
CWE-942 High
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124
#VU137232 - Resource exhaustion
CVE-2026-67238
CWE-400 Low
No
No
3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 09.07.2026 SB2026070934
SB2026103124