6.8
Moyenne
CVE-2026-58208 NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
Description
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with access to the WebSocket listener to reach uninitialized MQTT state and crash the server process. This issue is fixed in versions 2.14.3 and 2.12.12.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| nats-server 2.14 | 2.14.0-RC.1 → < 2.14.3 | 2.14.3 |
| nats-server 2.12 | premières → < 2.12.12 | 2.12.12 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de nats-server
Les 27 CVE de nats-server →
CVE-2026-58211
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
5.4
Moyenne
CVE-2026-58207
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
7.7
Élevée
CVE-2026-58210
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
7.5
Élevée
CVE-2026-58209
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
4.3
Moyenne