CVE-2026-58214

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to the internal $MQTT.deliver.pubrel subject family, bypassing configured subscribe permissions and exposing MQTT QoS2 protocol metadata for sessions in the account. This issue is fixed in versions 2.14.3 and 2.12.12.

• CWE-863

• https://github.com/nats-io/nats-server/commit/297b166be60fe13144084eed4b25201ead03204aPatch
• https://github.com/nats-io/nats-server/commit/34b09657bb596d5f850eaa5cfc97ea6b2f989a97Patch
• https://github.com/nats-io/nats-server/releases/tag/v2.12.12Release Notes
• https://github.com/nats-io/nats-server/releases/tag/v2.14.3Release Notes
• https://github.com/nats-io/nats-server/security/advisories/GHSA-4g68-3pwx-5vfjVendor Advisory

Published

Jul 8, 2026

Last Modified

Jul 13, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-58209NATS Server is a high-performance server for NATS.io, the cl…4.3
• CVE-2026-5821The Image Optimizer plugin for WordPress is vulnerable to ar…8.1
• CVE-2026-58210NATS Server is a high-performance server for NATS.io, the cl…7.5
• CVE-2026-58211NATS Server is a high-performance server for NATS.io, the cl…5.4
• CVE-2026-58212Rejected reason: Further research determined the issue is no…
• CVE-2026-58213NATS Server is a high-performance server for NATS.io, the cl…7.1
• CVE-2026-58216An out-of-bounds read flaw was found in Samba's Kerberos Key…5.3
• CVE-2026-58218A flaw was found in Samba's internal DNS server where unauth…5.3
• CVE-2026-5822Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-58222A security flaw combining LDAP filter injection and improper…8.8
• CVE-2026-58224A flaw was found in Samba's CTDB, the clustered database ser…6.5
• CVE-2026-58225SQL Injection vulnerability in elixir-ecto postgrex allows a…2.1