Skip to content

Vendor

cloudamqp vulnerabilities

2 published CVES affecting cloudamqp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of cloudamqp alerts

Products

Latest cloudamqp CVEs

Newest publication first

  1. CVE-2026-25768 LavinMQ is missing vhost access control

    Published
    HighCVSS 7.1 EPSS 0.27%

    LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadata in the broker they should not have access to. This vulnerability is fixed in 2.6.6.

  2. CVE-2026-25767 LavinMQ has incomplete shovel configuration validation

    Published
    HighCVSS 8.6 EPSS 0.30%

    LavinMQ is a high-performance message queue & streaming server. Before 2.6.8, an authenticated user, with the “Policymaker” tag, could create shovels bypassing access controls. an authenticated user with the "Policymaker" management tag could exploit it to read messages from vhos...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.