RHSA-2026:36016
Vulnerability from csaf_redhat - Published: 2026-07-06 18:33 - Updated: 2026-08-22 05:31Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
nats-server2.14:
* nats-server2.14-2.14.3-1.hum1 (aarch64, x86_64)
* nats-server2.14-2.14.3-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in NATS Server. This vulnerability allows for unauthorized information disclosure where MQTT messages, intended to be denied based on subscription rules, are still delivered to subscribers. This occurs because the server's delivery paths do not consistently recheck the original topic against deny rules before sending the messages, potentially exposing sensitive data to unintended recipients.
4.3 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in NATS Server, a high-performance messaging system. This vulnerability allows a client to bypass normal authentication and connection restrictions by registering as a "no_auth_user" through a specific parser path. This occurs when the client's initial operation is not a standard connection request. The consequence is unauthorized access, potentially leading to information disclosure or other unauthorized actions within the messaging system.
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in NATS Server. An authenticated MQTT client could exploit this by embedding protocol control characters within subscription filters. These characters would then be forwarded as NATS protocol data to route or leafnode connections, leading to the corruption of the protocol stream. This corruption allows for the injection of unintended NATS protocol operations, which could result in information disclosure and data integrity issues.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in NATS Server, a high-performance messaging system. An authenticated MQTT (Message Queuing Telemetry Transport) client could bypass security permissions by subscribing to an internal subject family. This unauthorized access allows the client to view sensitive MQTT Quality of Service 2 (QoS2) protocol metadata, leading to information disclosure for other sessions within the same account.
4.3 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in NATS Server. Message trace destination checks, which ensure that trace events are sent to authorized subjects, were not consistently applied to messages originating from leafnode connections. This inconsistency allows a leafnode operator to bypass these checks and send trace events to subjects that should otherwise be restricted. The primary consequence of this vulnerability is that it can be used to prevent the normal delivery or storage of affected messages, leading to a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:nats-server2-14-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
50 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nnats-server2.14:\n * nats-server2.14-2.14.3-1.hum1 (aarch64, x86_64)\n * nats-server2.14-2.14.3-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36016",
"url": "https://access.redhat.com/errata/RHSA-2026:36016"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58213",
"url": "https://access.redhat.com/security/cve/CVE-2026-58213"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58210",
"url": "https://access.redhat.com/security/cve/CVE-2026-58210"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58211",
"url": "https://access.redhat.com/security/cve/CVE-2026-58211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58209",
"url": "https://access.redhat.com/security/cve/CVE-2026-58209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58214",
"url": "https://access.redhat.com/security/cve/CVE-2026-58214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58254",
"url": "https://access.redhat.com/security/cve/CVE-2026-58254"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36016.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-08-22T05:31:27+00:00",
"generator": {
"date": "2026-08-22T05:31:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36016",
"initial_release_date": "2026-07-06T18:33:19+00:00",
"revision_history": [
{
"date": "2026-07-06T18:33:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T05:31:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "nats-server2-14-main@aarch64",
"product": {
"name": "nats-server2-14-main@aarch64",
"product_id": "nats-server2-14-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nats-server2.14@2.14.3-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nats-server2-14-main@src",
"product": {
"name": "nats-server2-14-main@src",
"product_id": "nats-server2-14-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nats-server2.14@2.14.3-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nats-server2-14-main@x86_64",
"product": {
"name": "nats-server2-14-main@x86_64",
"product_id": "nats-server2-14-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nats-server2.14@2.14.3-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nats-server2-14-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nats-server2-14-main@aarch64"
},
"product_reference": "nats-server2-14-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nats-server2-14-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nats-server2-14-main@src"
},
"product_reference": "nats-server2-14-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nats-server2-14-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nats-server2-14-main@x86_64"
},
"product_reference": "nats-server2-14-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-58209",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-07-08T21:02:12.921882+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498259"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NATS Server. This vulnerability allows for unauthorized information disclosure where MQTT messages, intended to be denied based on subscription rules, are still delivered to subscribers. This occurs because the server\u0027s delivery paths do not consistently recheck the original topic against deny rules before sending the messages, potentially exposing sensitive data to unintended recipients.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nats-server: NATS Server: Information disclosure due to inconsistent MQTT topic rechecking",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58209"
},
{
"category": "external",
"summary": "RHBZ#2498259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498259"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58209"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/181b1f51f40b9954c57e9d478e051fb257679356",
"url": "https://github.com/nats-io/nats-server/commit/181b1f51f40b9954c57e9d478e051fb257679356"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/1c429b6fdc5afd4188cc5faf1127f6334896cd87",
"url": "https://github.com/nats-io/nats-server/commit/1c429b6fdc5afd4188cc5faf1127f6334896cd87"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.12.12",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.12.12"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.14.3",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.14.3"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/security/advisories/GHSA-7qmq-8cc4-hxwg",
"url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-7qmq-8cc4-hxwg"
}
],
"release_date": "2026-07-08T20:12:11.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T18:33:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36016"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nats-server: NATS Server: Information disclosure due to inconsistent MQTT topic rechecking"
},
{
"cve": "CVE-2026-58211",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-07-08T21:02:08.378230+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NATS Server, a high-performance messaging system. This vulnerability allows a client to bypass normal authentication and connection restrictions by registering as a \"no_auth_user\" through a specific parser path. This occurs when the client\u0027s initial operation is not a standard connection request. The consequence is unauthorized access, potentially leading to information disclosure or other unauthorized actions within the messaging system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nats-server: NATS Server: Authentication bypass allows unauthorized access and information disclosure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58211"
},
{
"category": "external",
"summary": "RHBZ#2498258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58211"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/security/advisories/GHSA-hmmp-q8cx-v964",
"url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-hmmp-q8cx-v964"
}
],
"release_date": "2026-07-08T20:16:25.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T18:33:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36016"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nats-server: NATS Server: Authentication bypass allows unauthorized access and information disclosure"
},
{
"cve": "CVE-2026-58213",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-07-08T21:01:28.533621+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498249"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NATS Server. An authenticated MQTT client could exploit this by embedding protocol control characters within subscription filters. These characters would then be forwarded as NATS protocol data to route or leafnode connections, leading to the corruption of the protocol stream. This corruption allows for the injection of unintended NATS protocol operations, which could result in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nats-server: NATS Server: Protocol stream corruption and unintended operation injection via MQTT client subscription filters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58213"
},
{
"category": "external",
"summary": "RHBZ#2498249",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498249"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58213",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58213"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58213",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58213"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/366837cfc65ab9ccb4f98193c65e8daf238582d8",
"url": "https://github.com/nats-io/nats-server/commit/366837cfc65ab9ccb4f98193c65e8daf238582d8"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/64ebae40051ee497c481e10f316238faf0de1736",
"url": "https://github.com/nats-io/nats-server/commit/64ebae40051ee497c481e10f316238faf0de1736"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/f14856b9e57a36818f43851cb69b6e33670885c9",
"url": "https://github.com/nats-io/nats-server/commit/f14856b9e57a36818f43851cb69b6e33670885c9"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/pull/8163",
"url": "https://github.com/nats-io/nats-server/pull/8163"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/pull/8164",
"url": "https://github.com/nats-io/nats-server/pull/8164"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.12.9",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.12.9"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.14.1",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.14.1"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/security/advisories/GHSA-qrcv-3558-gj4f",
"url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-qrcv-3558-gj4f"
}
],
"release_date": "2026-07-08T19:52:12.148000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T18:33:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36016"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nats-server: NATS Server: Protocol stream corruption and unintended operation injection via MQTT client subscription filters"
},
{
"cve": "CVE-2026-58214",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-07-08T21:02:16.268947+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498260"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NATS Server, a high-performance messaging system. An authenticated MQTT (Message Queuing Telemetry Transport) client could bypass security permissions by subscribing to an internal subject family. This unauthorized access allows the client to view sensitive MQTT Quality of Service 2 (QoS2) protocol metadata, leading to information disclosure for other sessions within the same account.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nats-server: NATS Server: Information disclosure via MQTT client subscription bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58214"
},
{
"category": "external",
"summary": "RHBZ#2498260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498260"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58214"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58214"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/297b166be60fe13144084eed4b25201ead03204a",
"url": "https://github.com/nats-io/nats-server/commit/297b166be60fe13144084eed4b25201ead03204a"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/34b09657bb596d5f850eaa5cfc97ea6b2f989a97",
"url": "https://github.com/nats-io/nats-server/commit/34b09657bb596d5f850eaa5cfc97ea6b2f989a97"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.12.12",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.12.12"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.14.3",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.14.3"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/security/advisories/GHSA-4g68-3pwx-5vfj",
"url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-4g68-3pwx-5vfj"
}
],
"release_date": "2026-07-08T20:06:34.794000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T18:33:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36016"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nats-server: NATS Server: Information disclosure via MQTT client subscription bypass"
},
{
"cve": "CVE-2026-58254",
"cwe": {
"id": "CWE-1220",
"name": "Insufficient Granularity of Access Control"
},
"discovery_date": "2026-07-08T21:02:37.570866+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498266"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in NATS Server. Message trace destination checks, which ensure that trace events are sent to authorized subjects, were not consistently applied to messages originating from leafnode connections. This inconsistency allows a leafnode operator to bypass these checks and send trace events to subjects that should otherwise be restricted. The primary consequence of this vulnerability is that it can be used to prevent the normal delivery or storage of affected messages, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nats-server: NATS Server: Denial of Service via inconsistent message trace destination checks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58254"
},
{
"category": "external",
"summary": "RHBZ#2498266",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498266"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58254",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58254"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58254",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58254"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/cbe845932980b71563efac5cfa4cc751c88936cd",
"url": "https://github.com/nats-io/nats-server/commit/cbe845932980b71563efac5cfa4cc751c88936cd"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.12.8",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.12.8"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.14.3",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.14.3"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/security/advisories/GHSA-p3j5-5hrq-p75h",
"url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-p3j5-5hrq-p75h"
}
],
"release_date": "2026-07-08T19:56:58.311000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-06T18:33:19+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36016"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nats-server2-14-main@aarch64",
"Red Hat Hardened Images:nats-server2-14-main@src",
"Red Hat Hardened Images:nats-server2-14-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nats-server: NATS Server: Denial of Service via inconsistent message trace destination checks"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…