Recorded 2 Nov 2026 at 09:04 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
CVEMicrosoft Security Response Center
Weak PBKDF2 parameters for password-encrypted private-key export in jose
Weak PBKDF2 parameters for password-encrypted private-key export in jose
What it said
CVE
CVE-2026-65629
Severity
Moderate
CVSS base score
Not published
CVSS vector
Not published
Impact
Not stated
Exploitation detected
Unknown: not stated by MSRC
Publicly disclosed
Unknown: not stated by MSRC
Exploitability
Not assessed
Component
Mariner
Weakness
CWE-916: Use of Password Hash With Insufficient Computational Effort
Issued by
EEF
Customer action
Required: follow the MSRC remediation guidance
Affected products
azl3 rabbitmq-server 3.13.7-10 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0
Complete at observationRead 2 Nov 2026 at 09:03 UTC
CISA KEV
Complete at observationRead 2 Nov 2026 at 09:03 UTC
FIRST EPSS
Complete at observationRead 2 Nov 2026 at 09:03 UTC
Public detection templates (Nuclei)
Complete at observationRead 2 Nov 2026 at 09:03 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
Affected products: azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0 → azl3 rabbitmq-server 3.13.7-10 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
2 Nov 2026 · 09:04:36 UTCAffected productsazl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0 → azl3 rabbitmq-server 3.13.7-10 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0