Threats tagged 'bit-nats-2026-58253'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.4%	CVE-2026-58253Nats server: Prior to 2.14.0, 2.12.7, and 2.11.16, when no_auth_user was configured, a parser fast path intended for High8.8EPSS 0.4%2026-07-08GCVE DatabaseCVE-2026-58253 CVE-2026-58253 is an authentication bypass vulnerability in NATS Server versions prior to 2.14.0, 2.12.7, and 2.11.16. It affects route and leafnode listeners when the no_auth_user configuration is enabled, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and gain associated privileges. The issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16. EPSS 0.4%Report on CVE-2026-58253 Vulnerability #bit-nats-2026-58253 #bitnami	GCVE Database	2026-07-08

Page 1 of 1