VulnSocial

CVE-2026-57211Patch(broadcom / rabbitmq_server)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch broadcom rabbitmq_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbit_mgmt_wm_static can pass URL-encoded backslashes to erl_prim_loader:read_file_info before path validation when multiple management extension plugins are enabled, causing outbound DNS and SMB requests to attacker-controlled UNC paths. This issue is fixed in versions 4.1.11 and 4.2.6.

broadcom CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-36CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • rabbitmq_server
  • windows

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
broadcommicrosoft
Products
rabbitmq_serverwindows

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-14: 1Patch / Workaround · 2026-07-14: 1Technical Details · 2026-07-14: 107-14
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • SecAlerts@SecAlertsCo
    Patch

    🐇 RabbitMQ on Windows: CVSS 10 SSRF in the management UI. The static file handler passes URL-encoded backslashes to UNC paths. Upgrade to 4.1.11 or 4.2.6 now. CVE-2026-57211 #RabbitMQ #infosec https://secalerts.co/vulnerability/CVE-2026-57211?utm_campaign=x https://t.co/ihsa5NAFh6

    Post summary

    The tweet announces the SSRF vulnerability CVE‑2026‑57211 in RabbitMQ’s Windows UI, provides technical details, and urges users to upgrade to the patched versions 4.1.11 or 4.2.6.

    00000101
    858 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appbroadcomrabbitmq_server---
OSmicrosoftwindows---

Explore more

Back to dashboardbroadcom CVEsmicrosoft CVEsrabbitmq_server vulnerabilities