CVE detail
CVE-2026-44393
An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When ssl_ca_file is configured, the driver enables certificate chain validation but does not pass the expected broker hostname into the underlying TLS stack. Any certificate signed by the deployment CA is accepted regardless of hostname, allowing an attacker who can intercept control-plane traffic to impersonate the RabbitMQ broker and perform a man-in-the-middle attack on RPC and notification traffic. All OpenStack services using oslo.messaging with RabbitMQ over TLS are affected.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 14.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44393.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comJun 4, 2026, 4:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2484835bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 4, 2026, 4:16 PM - https://access.redhat.com/security/cve/CVE-2026-44393access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 4, 2026, 4:16 PM - https://wiki.openstack.org/wiki/OSSN/OSSN-0096wiki.openstack.org
No excerpt available.
Vendor Advisorywiki.openstack.orgJun 4, 2026, 4:16 PM - https://bugs.launchpad.net/oslo.messaging/+bug/2150316bugs.launchpad.net
No excerpt available.
Exploitbugs.launchpad.netJun 4, 2026, 4:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-42790CVSS 7.6 · High
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints bypass via subject CommonName fallback in…
- CVE-2026-43869CVSS 7.3 · High
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to versio…
- CVE-2026-22747CVSS 6.8 · Medium
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong…
- CVE-2026-34477CVSS 6.3 · Medium
The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.sslVerify…
- CVE-2025-68161CVSS 6.3 · Medium
The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https:…
- CVE-2024-49782CVSS 6.8 · Medium
IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to…