Advisories · Technology

Apache Software Foundation Apache Qpid Broker-J.

Every CVE that names Apache Software Foundation Apache Qpid Broker-J among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92550 CVE record

CVSS 7.5 High

Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 25 Sept 2026
CVE-2026-92560 CVE record

CVSS 7.5 High

Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 25 Sept 2026
CVE-2026-92573 CVE record

CVSS 6.5 Medium

Apache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering
- Apache Software Foundation Apache Qpid Broker-J
- CWE-409
Not analysed yet 25 Sept 2026
CVE-2026-92564 CVE record

CVSS 7.5 High

Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 25 Sept 2026
CVE-2026-92608 CVE record

CVSS 7.5 High

Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10
- Apache Software Foundation Apache Qpid Broker-J
- CWE-248
Not analysed yet 25 Sept 2026
CVE-2026-92609 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication
- Apache Software Foundation Apache Qpid Broker-J
- Authentication bypass
Not analysed yet 25 Sept 2026
CVE-2026-68080 CVE record

CVSS 6.5 Medium

Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
- Apache Software Foundation Apache Qpid Broker-J
- CWE-406
Not analysed yet 5 Aug 2026
CVE-2026-68078 CVE record

CVSS 6.5 Medium

Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming delivery
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 5 Aug 2026
CVE-2026-68077 CVE record

CVSS 6.5 Medium

Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service
- Apache Software Foundation Apache Qpid Broker-J
- CWE-606
Not analysed yet 5 Aug 2026
CVE-2026-68075 CVE record

CVSS 6.5 Medium

Apache Qpid Broker-J: Incoming session flow control window can be exceeded
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 5 Aug 2026
CVE-2026-68073 CVE record

CVSS 7.5 High

Apache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflow
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 5 Aug 2026
CVE-2026-68060 CVE record

CVSS 7.5 High

Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 5 Aug 2026
CVE-2026-68074 CVE record

CVSS 7.5 High

Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
- Apache Software Foundation Apache Qpid Broker-J
- Denial of service
Not analysed yet 5 Aug 2026