Threats tagged 'bit-nats-2026-58214'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-58214Nats server: Prior to 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to the internal Medium4.3EPSS 0.3%2026-07-08GCVE DatabaseCVE-2026-58214 CVE-2026-58214 is a vulnerability in NATS Server versions prior to 2.14.3 and 2.12.12 where an authenticated MQTT client can bypass subscription access controls by subscribing to the internal $MQTT.deliver.pubrel subject prefix. This exposure allows access to MQTT QoS2 protocol metadata for sessions within the account. The issue is fixed in versions 2.14.3 and 2.12.12. EPSS 0.3%Report on CVE-2026-58214 Vulnerability #bit-nats-2026-58214 #bitnami	GCVE Database	2026-07-08

Page 1 of 1