References https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21554 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30080 https://nvd.nist.gov/vuln/detail/cve-2023-21554 https://nvd.nist.gov/vuln/detail/cve-2024-30080 https://www.tenable.com/plugins/nessus/175373 https://www.tenablecloud.cn/plugins/nessus/175373 https://www.zoemurmure.top/posts/cve_2023_21554/ https://www.ibm.com/think/x-force/msmq-queuejumper-rce-vulnerability-technical-analysis https://www.automox.com/worklets/mitigate-msmq-rce-windows https://www.threatdown.com/blog/patch-now-critical-rce-vulnerability-in-microsoft-message-queuing/ https://www.sxxdckj.com/cms/a/Microsoft-Message-Queuing-yuan-cheng-dai-ma-zhi-xing-lou-dong-CNVD-2024-04953.html https://www.cnvd.org.cn/patchInfo/show/475731 https://github.com/leongxudong/MSMQ-Vulnerability
Related VulnerabilitiesPoCCVE-2026-8237: Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)PoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEMicrosoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞(CVE-2025-53770)Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞(CVE-2026-50522)Microsoft SharePoint Server JWT 权限绕过漏洞(CVE-2026-55040)研華科技|Hospital Queuing Management - 存在2個漏洞Ivanti Sentry /mics/api/v2/sentry/mics-config/handleMessage 命令执行漏洞(CVE-2026-10520)智联云采 SRM2.0 /a/sys/sysMessage/statusList SQL 注入漏洞PoCretool-postmessage-xss: Retool Self-Hosted - postMessage XSS via Custom Component CollectionsPoC孚盟云CRM /m/Dingding/Ajax/AjaxFormDefault.ashx sendProductMessage SQL 注入漏洞PoC蓝凌-EIS智慧协同平台 /third/DingTalk/Pages/DingTalkMessage.aspx SQL 注入漏洞PoCCVE-2021-28480: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)PoCCVE-2021-28481: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)