6.5

CVE-2026-66074: broadcom rabbitmq_server

CVSS: 6.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-66074DEBIAN-CVE-2026-66074
Published 23-09-2026Last modified 24-09-2026
Open JSON

Vulnerability summary

CVE-2026-66074 is a medium (CVSS 6.5) vulnerability in broadcom rabbitmq_server. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 24.6% of scored vulnerabilities.

Overall risk
26/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.33%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1
RHSA-2026:67552

Timeline

  1. 23-09-2026
    PublishedVulnerability first disclosed.
  2. 24-09-2026
    Last modifiedVulnerability information updated.

Description

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, match_value/3 passes the user-supplied ?name= regular expression to re:run with no match_limit option, and executes it once per resource in the result set. OTP's default 10M match_limit caps each call at roughly 100-200ms, but the regex runs once per resource in the result set. With a large set, for example 5000 queues at 150ms each, a single request consumes 12 or more minutes of CPU. Parallel requests saturate the schedulers. The use_regex=true option is a supported feature on list endpoints, so this path is reachable through normal API use. Preconditions include Any user with the management tag can exploit this.. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.33%

Chance of exploitation in the next 30 days

Percentile

25%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

24-09-202619-10-2026
EPSS score
0.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Broadcom1 product
  • rabbitmq_server≥ 3.13.0, < 3.13.15 | ≥ 4.0.0, < 4.0.20 | ≥ 4.1.0, < 4.1.11 | ≥ 4.2.0, < 4.2.6
Debian1 product
  • rabbitmq-serverAll versions (No fix recorded) | < 4.3.0-2
Rabbitmq1 product
  • rabbitmq-server≥ 3.13.0, < 3.13.15 | ≥ 4.0.0, < 4.0.20 | ≥ 4.1.0, < 4.1.11 | ≥ 4.2.0, < 4.2.6
Ubuntu1 product
  • rabbitmq-serverAll versions (No fix recorded)

4 vendors · 4 products

References

6 links