CVE-2026-67220

Published 23 September 2026 · tracked since 24 September 2026

Description

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, add_binding/3 reads the rjms_erlang_selector argument and passes it through erl_scan:string/1 then erl_parse:parse_term/1. erl_scan:string/1 in

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-120151 HIGH 8.8
• CVE-2026-120150 HIGH 8.8
• CVE-2026-120149 HIGH 8.8
• CVE-2026-120147 HIGH 8.8
• CVE-2026-120145 HIGH 8.8
• CVE-2026-120144 HIGH 8.8
• CVE-2026-120143 HIGH 8.8
• CVE-2026-120142 HIGH 8.8
• CVE-2026-120141 HIGH 8.8
• CVE-2026-120139 HIGH 8.8

→ Open the live CVE board · all tools