← Database

CVE-2026-25768

MEDIUM CVSS: 6.5 Published: 2026-02-12 Modified: 2026-06-17

Description

LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadata in the broker they should not have access to. This vulnerability is fixed in 2.6.6.

Affected Platforms

84Codes Lavinmq

Weakness Type

CWE-862

References