THREAT OPS › Threat News › [NVD] CVE-2026-33247 (HIGH 7.4) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv (the command-line), then those credentials are visible to any us
[NVD] CVE-2026-33247 (HIGH 7.4) — NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv (the command-line), then those credentials are visible to any us
CVE-2026-33247 CVSS: 7.4 HIGH Published: 2026-03-25T20:16:33.223
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv (the command-line), then those credentials are visible to any user who can see the monitoring port, if that too is ena
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-33247cve
- nats.iodomain
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-33247