Threats tagged 'bit-nats-2026-58209'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-58209Nats server: Prior to 2.14.3 and 2.12.12, MQTT retained message delivery and QoS1+ durable replay could deliver Medium4.3EPSS 0.3%2026-07-08GCVE DatabaseCVE-2026-58209 CVE-2026-58209 affects NATS Server versions prior to 2.14.3 and 2.12.12. It allows MQTT retained message delivery and QoS1+ durable replay to bypass subscription deny filters because these delivery paths do not consistently recheck the original topic against deny rules before delivering messages. This results in messages that should have been blocked being delivered. A fix is available in versions 2.14.3 and 2.12.12. The vulnerability has a medium severity with a CVSS score of 4.3. EPSS 0.3%Report on CVE-2026-58209 Vulnerability CWE-346 #bit-nats-2026-58209 #bitnami	GCVE Database	2026-07-08

Page 1 of 1