Is CVE-2026-59272 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-59272?

CVE-2026-59272 has a CVSS v3 severity of MEDIUM (6.8).

Back

CVE-2026-59272

Description

Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier