CVE-2026-67406 | RabbitMQ up to 4.0.22/4.1.13/4.2.8/4.3.2 Shovel formatstatus/2 missing encryption

September 25, 2026 Yanac

A vulnerability classified as problematic was found in RabbitMQ up to 4.0.22/4.1.13/4.2.8/4.3.2. This affects the function formatstatus/2 of the component Shovel. Executing a manipulation can lead to missing encryption of sensitive data.

This vulnerability appears as CVE-2026-67406. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More