{"action":"Upgrade rabbitmq-server to 3.6.6-1 or later.","affected":[{"fixed":"3.6.6-1","introduced":"0"}],"component":"rabbitmq-server","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["3.6.6-1"],"id":"tcs_01M5NBVFCPD47W2MDH6TYMAY3W","modified_at":"2026-09-22T07:02:19.125388290Z","published_at":"2016-12-29T09:59:00.790Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-9877","https://security-tracker.debian.org/tracker/CVE-2016-9877"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-9877","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-9877"}],"summary":"An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport)"}