PT-2026-56560 · Unknown · Nats Server

0Xasritha

·

CVE-2026-58210

·

Published

2026-07-08

·

Updated

2026-07-14

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.14.3 NATS Server versions prior to 2.12.12
Description An unauthenticated MQTT client can cause the server to consume excessive memory by sending large incomplete MQTT CONNECT packets. The server retains these packets while the parser waits for the advertised packet length to be completed before authentication is finalized, leading to memory exhaustion.
Recommendations Update NATS Server to version 2.14.3. Update NATS Server to version 2.12.12.

Exploit

Fix

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

BIT-NATS-2026-58210
CVE-2026-58210
GHSA-R72H-J7QQ-V6QG
RHSA-2026:36016
RHSA-2026:36017

Affected Products

Nats Server