CVE-2026-67591

—

CVSS 3.1

6.5 medium

EPSS

<1%p36

Published

Aug 5, 2026 (Aug 5, 2026)

Modified

Aug 7, 2026

Description

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue.

Vendors: apache
Products: qpid protonj2
Weakness: CWE-770
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.