HIGH

CVE-2026-67592

Apache Qpid Protonj2 2026-08-05 CVSS v3.1

CVSS

7.5

Description

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.

This issue affects Apache Qpid ProtonJ2: through 1.1.0.

Users are recommended to upgrade to version 1.2.0, which fixes the issue

Weakness (CWE)

CWE-770 Resource Allocation Without Limits

EPSS Score

0.48%

Probability of exploitation in next 30 days

40.5th percentile

References

https://lists.apache.org/thread/b4pv9hfdk7ox78pss77sb4nzwjrvqhhz Mailing List, Vendor Advisory http://www.openwall.com/lists/oss-security/2026/08/04/31 Mailing List, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE