CVE-2026-9844: Vulnerability in navify® Digital Pathology

Synopsis

An authentication bypass via default credentials affects the RabbitMQ Management interface in Roche Diagnostics navify Digital Pathology versions 2.0.0 through 2.4.1. The vulnerability is reachable over the network with no authentication required, because the RabbitMQ Management interface ships with well-known default usernames and passwords that remain active. Successful exploitation gives an attacker the ability to tamper with message queues and disrupt pathology processing workflows, as well as read limited configuration data. No fix version has been published; HarborGuard tracks this advisory for patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The RabbitMQ Management interface is exposed over the network, so an attacker must be able to reach the service on its network port to attempt credential login.

• AuthenticationNot required

  No credentials beyond the publicly documented defaults are needed; the vulnerability exists precisely because default credentials remain valid and unrotated.

• Victim interactionNot required

  No user action or social engineering is needed; the attacker interacts directly with the RabbitMQ Management interface without involving any human victim.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special timing, race conditions, or environmental setup beyond network access to the interface.

Blast Radius

• Reads limited configuration data and internal queue metadata visible through the RabbitMQ Management interface.
• Modifies, deletes, or injects messages into pathology processing queues, corrupting or redirecting diagnostic workflows.
• Crashes or destabilizes the RabbitMQ broker, taking down the messaging layer that navify Digital Pathology depends on for scan distribution and result delivery.
• Achieves limited lateral visibility into downstream systems that consume or publish to the same broker, based on low-severity scope impact to adjacent components.