๐Ÿ” CVE Alert

CVE-2026-92560

HIGH 7.5

Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.

CWE CWE-770
Vendor apache software foundation
Product apache qpid broker-j
Published Sep 25, 2026
Last Updated Sep 25, 2026
Stay Ahead of the Next One

Get instant alerts for apache software foundation apache qpid broker-j

Be the first to know when new high vulnerabilities affecting apache software foundation apache qpid broker-j are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Apache Software Foundation / Apache Qpid Broker-J
0 โ‰ค 10.1.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
lists.apache.org: https://lists.apache.org/thread/dcsjw242n1bxdog29hwlg43r5611dtb7 openwall.com: http://www.openwall.com/lists/oss-security/2026/09/24/13

Credits

๐Ÿ” n0mi1k