CVE-2026-67554 Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes t...

CVE-2026-68077

CVE-2026-68077 affects Apache Qpid Broker-J up to version 10.0.1. An authenticated attacker can craft a disposition frame with large or illegal ranges, triggering naive range handling and excessive CPU usage that leads to a denial of service. The issue’s remediation is to upgrade to version 10.1....

CVE-2026-66276 Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the...

CVE-2026-66276

The CVE-2026-66276 entry concerns Apache Qpid Proton-J. Affected up to version 0.34.1, where an authenticated attacker can craft a disposition frame with large or illegal ranges. The vulnerability stems from naive range handling, causing excessive CPU usage and leading to denial of service. impac...