CVE-2026-59271

6.5 mediumEPSS 0.3%

Medium (6.5) in vmware spring advanced message queuing protocol. EPSS 0.3% chance of exploitation in the next 30 days.

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2026-08-27
Modified: 2026-09-01
Record from: the NVD, synced 2026-10-19

Affected

vmware:spring_advanced_message_queuing_protocol

References

https://spring.io/security/cve-2026-59271

Check your stack JSON