CVE-2026-67554 Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes t...

CVE-2026-68077 Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the...

CVE-2026-68077

CVE-2026-68077 affects Apache Qpid Broker-J up to version 10.0.1. An authenticated attacker can craft a disposition frame with large or illegal ranges, triggering naive range handling and excessive CPU usage that leads to a denial of service. The issue’s remediation is to upgrade to version 10.1....

CVE-2026-66276 Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the...

CVE-2026-66276

The CVE-2026-66276 entry concerns Apache Qpid Proton-J. Affected up to version 0.34.1, where an authenticated attacker can craft a disposition frame with large or illegal ranges. The vulnerability stems from naive range handling, causing excessive CPU usage and leading to denial of service. impac...

CVE-2026-67591

Apache Qpid ProtonJ2 prior to 1.2.0 is affected by CVE-2026-67591 where an authenticated attacker could exceed the incoming session flow-control window, potentially causing a denial of service. The issue is reported for ProtonJ2 versions up to 1.1.0, with upgrade to version 1.2.0 recommended as t...

CVE-2026-67591 Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

CVE-2026-67553

CVE-2026-67553 concerns Apache Qpid Proton-Dotnet up to 1.0.0, where an authenticated attacker could exceed the session flow control incoming window, potentially causing a denial of service. The issue is mitigated by upgrading to version 1.1.0. No exploit details or in-the-wild status are provided.

CVE-2026-67553 Apache Qpid Proton Dotnet: Incoming session flow control window can be exceeded

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-68075 Apache Qpid Broker-J: Incoming session flow control window can be exceeded

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

CVE-2026-68075

CVE-2026-68075 concerns Apache Qpid Broker-J. An authenticated attacker could exceed the session flow control incoming window, potentially causing a denial of service. The issue affects Broker-J versions through 10.0.1. A fix is available in version 10.1.0. The connected sources do not provide ex...

CVE-2026-66275

The CVE affects Apache Qpid Proton-J up to version 0.34.1. An authenticated attacker could exceed the incoming session flow control window, potentially causing a denial of service. The issue is tied to flow control handling in the session/channel lifecycle. Upgrade to version 0.35.0 to fix the is...

CVE-2026-66275 Apache Qpid Proton-J: Incoming session flow control window can be exceeded

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

CVE-2026-67590 Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

CVE-2026-67590

CVE-2026-67590 affects Apache Qpid ProtonJ2 up to version 1.1.0. The issue is caused by unbounded type nesting, allowing a pre-authentication attacker to trigger a StackOverflowError and potentially cause a denial of service. A fixed version is available: upgrade to ProtonJ2 1.2.0. If upgrading i...

CVE-2026-67552 Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-68073 Apache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

CVE-2026-68073

Affected product: Apache Qpid Broker-J. Vulnerability: unbounded type nesting allows pre-authentication StackOverflowError, potentially causing denial of service. Affected versions: up to 10.0.1. Root cause: unbounded type nesting leading to stack overflow. Impact: pre-authentication denial of se...

CVE-2026-66274

CVE-2026-66274 affects Apache Qpid Proton-J via unbounded type nesting that can cause a pre-authentication StackOverflowError, potentially enabling a denial of service. Affected: Proton-J up to and including 0.34.1. Root cause: unbounded nesting during type handling. Impact: pre-authentication cr...

CVE-2026-67589

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...