Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-32026

Good to know:

icon

Date: August 19, 2025

In NATS server before 2.2.3, TLS is missing ciphersuite settings when CLI flags used. If a server administrator chooses to start the nats-server with TLS configuration parameters provided on the command-line, then clients can negotiate TLS ciphersuites which were not expected.

Language: Go

Severity Score

Related Resources (7)

https://nvd.nist.gov/vuln/detail/CVE-2021-32026
https://advisories.nats.io
https://advisories.nats.io/CVE/CVE-2021-32026.txt
https://github.com/nats-io/nats-server
https://github.com/nats-io/nats-server/security/advisories/GHSA-jj54-5q2m-q7pj
https://github.com/nats-io/nats-server/commit/ffccc2e1bd7aa2466bd9e631e976bfd7ca46f225
https://www.mend.io/vulnerability-database/CVE-2021-32026

Severity Score

Top Fix

icon

Upgrade Version

Upgrade to version github.com/nats-io/nats-server/v2 - v2.2.3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): HIGH
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us