RocketChat

8 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-58066

  Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML…

  RocketChat Rocket.Chat
  Jul 30, 2026
• Critical 9.3
  CVE-2026-55666

  Rocket.Chat: Email Parameter Fallback Leads To Account Takeover Within Apple OAuth

  Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, in apps/meteor/app/apple/server/loginHandler.ts, handleIdentityToken parses a JWT issued by Apple during the OAu…

  RocketChat Rocket.Chat
  Jun 24, 2026
• Critical 9.3
  CVE-2026-46423

  Rocket.Chat: SAML signature validation skipped when IdP certificate field is empty

  Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's SAML service provider implementation silently skips both SAML Response and Assertion signa…

  RocketChat Rocket.Chat
  Jun 24, 2026
• Critical 9.1
  CVE-2026-45689

  Rocket.Chat: Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATO

  Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, an unauthenticated network attacker obtains a valid Rocket.Chat OAuth access token for an arbitrary user…

  RocketChat Rocket.Chat
  Jun 24, 2026
• Critical 9.1
  CVE-2026-45688

  Rocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack

  Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's CAS login handler forwards the client-supplied options.cas.credentialToken value straight …

  RocketChat Rocket.Chat
  Jun 24, 2026
• Critical 9.3
  CVE-2026-48616

  Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in …

  RocketChat Rocket.Chat
  Jun 16, 2026
• Critical 9.8
  CVE-2026-29198 Public exploit

  In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability …

  RocketChat Rocket.Chat
  Apr 22, 2026
• Critical 9.3
  CVE-2026-28514

  Rocket.Chat: Users can login with any password via the EE ddp-streamer-service

  Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to versions 7.8.6, 7.9.8, 7.10.7, 7.11.4, 7.12.4, 7.13.3, and 8.0.0, a critical authentication bypass vulnerability exists in Rocket.Chat's account service used in the dd…

  RocketChat Rocket.Chat
  Mar 6, 2026