[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx6wdxT0akUSWfiad5GrDLzdaQMUxfZHeUhNP5YLreYg":3,"g5a-risk:CVE-2026-106121":128},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":70,"weaknesses":71,"weaknessesCount":49,"isActivelyExploited":80,"cisaInfo":29,"otxData":29,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":116,"notableEvents":117},"CVE-2026-106121","What is CVE-2026-106121?","The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners do not stop at CharacterIterator.DONE. The default DefaultJsonRpcMapper passes JSON-RPC message bodies to this parser for JsonRpcServer and client replies. A truncated string causes the parser to append replacement end markers until heap exhaustion, while a line comment without a terminating newline can keep a thread consuming CPU indefinitely, resulting in denial of service. This issue is fixed in version 5.37.0.","The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.j...","2026-10-06T19:17:43.193","2026-10-09T18:26:02.737",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NETWORK","LOW","HIGH","NONE","UNCHANGED",4.9,"MEDIUM",null,1.2,3.6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":36,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":25,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},3.9,[],[],[],0.00501,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"vmware","rabbitmq_java_client","*","cpe:2.3:a:vmware:rabbitmq_java_client:*:*:*:*:*:*:*:*",1,[51,56,59,63,68],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002Frabbitmq\u002Frabbitmq-java-client\u002Fcommit\u002F25fad817291feff3195c32620117d295598f8b41","GitHub",[55],"Patch",{"url":57,"source":53,"tags":58},"https:\u002F\u002Fgithub.com\u002Frabbitmq\u002Frabbitmq-java-client\u002Fpull\u002F2100",[55],{"url":60,"source":53,"tags":61},"https:\u002F\u002Fgithub.com\u002Frabbitmq\u002Frabbitmq-java-client\u002Freleases\u002Ftag\u002Fv5.37.0",[62],"Release Notes",{"url":64,"source":53,"tags":65},"https:\u002F\u002Fgithub.com\u002Frabbitmq\u002Frabbitmq-java-client\u002Fsecurity\u002Fadvisories\u002FGHSA-cqgh-8p3p-mx4m",[66,67],"Exploit","Vendor Advisory",{"url":64,"source":53,"tags":69},[66,67],5,[72],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Incomplete","Base","Simple",false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2026-106121? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-106121, a high severity cyber security vulnerability from 2026. The RabbitMQ Java client library allows Java and JVM-based...","CVE-2026-106121, CVE-2026-106121 vulnerability, CVE-2026-106121 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, vmware security, rabbitmq_java_client vulnerability","\u002Fwhat-is\u002Fcve-2026-106121",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-106121","Cybersecurity","CVE-2026-106121, CVE-2026-106121 vulnerability, CVE-2026-106121 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":29,"Negate":29,"Nodes":109},[110],{"Operator":111,"Negate":80,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":114,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":115,"VersionEndIncluding":29},"DA24C4A3-F79F-400D-9CC8-9886341BA95C","5.37.0",[],[118],{"id":119,"eventType":120,"eventTime":121,"details":122,"label":123,"color":124},"ca990bfe-031a-4550-8d19-351777471238","NEW_NVD","2026-10-07T04:02:43.248887+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":126,"version":127},1792375493679,"2.0",{"score":129,"band":130,"action":131,"scoredAt":132},47,"Medium","Plan remediation","2026-10-16T07:18:32.962911+00:00"]