CVE-2026-26445

A flaw was found in stomper. A remote attacker can exploit this by sending partial STOMP Streaming Text Oriented Messaging Protocol frames. This action can cause the broker's sockets to enter a permanent half-read state. Consequently, the broker stops processing new messages, leading to a Denial ...

Linux Distros Unpatched Vulnerability : CVE-2026-26445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the...

CVE-2026-26445

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-26445

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-26445

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

PT-2026-82270

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSG PEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-26445: Allocation of Resources Without Limits or Throttling

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-26445

The stomper 5e2741e message broker is vulnerable to a Denial of Service (DoS) attack. A remote attacker can exploit this by sending partial STOMP (Streaming Text Oriented Messaging Protocol) frames while maintaining open TCP connections. Due to the broker's use of edge-triggered epoll (EPOLLET) a...

EUVD-2026-66756

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

Linux Distros Unpatched Vulnerability : CVE-2026-59920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's STOMP encoder...