Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how nats compares to other vendors in security performance

View Risk Score →

linuxfoundation Nats-serverNATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled

Risk 43
Severity
7.5
First published (updated )
CVE-2026-58208

linuxfoundation Nats-serverNATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions

Risk 34
Severity
5.4
First published (updated )
CVE-2026-58211

linuxfoundation Nats-serverNATS Server: Remote crash via integer overflow in Connz pagination

Risk 44
Severity
7.7
First published (updated )
CVE-2026-58207

linuxfoundation Nats-serverNATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory

Risk 43
Severity
7.5
First published (updated )
CVE-2026-58210

NATS NATS ServerNATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)

Risk 22
Severity
4.3
First published (updated )
CVE-2026-58214
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

linuxfoundation Nats-serverNATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check

Risk 40
Severity
5.3
First published (updated )
CVE-2026-58254

linuxfoundation Nats-serverNATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection

Risk 48
Severity
7.1
First published (updated )
CVE-2026-58213

linuxfoundation Nats-serverNATS Server: Pre-auth server crash via double INFO in leafnode handshake

Risk 43
Severity
7.5
First published (updated )
CVE-2026-58250

NATS NATS ServerNATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prio…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2451446

go/github.com/nats-io/nats-server/v2NATS is vulnerable to MQTT hijacking via Client ID

Risk 33
Severity
6.5
EPSS
0.01%
First published (updated )
CVE-2026-33215
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2025-30215: nats-server: Missing access controls for JS API

First published (updated )
https://seclists.org/oss-sec/2025/q2/29

NATS: 2023-02: nkeys: xkeys Seal encryption used fixed key for all encryption

First published (updated )
https://seclists.org/oss-sec/2023/q4/197

NATS: 2023-01: Adding accounts for just the system account adds auth bypass

First published (updated )
https://seclists.org/oss-sec/2023/q4/196

go/github.com/nats-io/nats-server/v2xkeys Seal encryption used fixed key for all encryption

Risk 46
Severity
7.5
First published (updated )
CVE-2023-46129

NATS: 2023-01: Adding accounts for just the system account adds auth bypass

First published (updated )
https://seclists.org/oss-sec/2023/q4/195
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NATS: 2023-01: Adding accounts for just the system account adds auth bypass

First published (updated )
https://seclists.org/oss-sec/2023/q4/194

NATS: 2023-01: Adding accounts for just the system account adds auth bypass

First published (updated )
https://seclists.org/oss-sec/2023/q4/88

NATS NATS ServerPath Traversal

Risk 38
Severity
6.5
First published (updated )
CVE-2022-26652

go/github.com/nats-io/nats-server/v2NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the pr…

Risk 80
Severity
8.8
First published (updated )
CVE-2022-24450

go/github.com/nats-io/jwtNATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Impo…

Risk 45
Severity
7.5
First published (updated )
CVE-2021-3127
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/nats-io/nats-server/v2Denial of Service (DoS)

Risk 44
Severity
7.5
First published (updated )
CVE-2020-28466

go/github.com/nats-io/nats-server/v2Integer Overflow

Risk 44
Severity
7.5
First published (updated )
CVE-2019-13126

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203