Apache Qpid Broker-J (Product): news timeline & CVEs

CVE-2026-92609: Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication

Apache Qpid Broker-J through 10.1.0 has a session-fixation flaw in HTTP management authentication.

Apache Qpid Broker-J through 10.1.0 fails to renew the HTTP session after successful management authentication. A remote attacker who can fix a session identifier can reuse it to gain unauthorized access to an authenticated management session. The vendor rates the issue important and recommends users upgrade.

oss-securitySep 24, 23:55 UTC · 2d agoVulnerability 6 sources CVE-2026-92609

CVE-2026-92608: Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10

Authenticated producers can disrupt AMQP 0-10 delivery on Qpid Broker-J through 10.1.0.

Apache Qpid Broker-J through 10.1.0 incompletely handles property-encoding exceptions when converting AMQP 1.0 messages to AMQP 0-10. An authenticated message producer can send properties the target encoder does not handle and disrupt delivery to AMQP 0-10 consumers. The vendor rates the flaw moderate.

oss-securitySep 24, 23:54 UTC · 2d agoVulnerability 6 sources CVE-2026-92608

CVE-2026-92573: Apache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering

Authenticated producers can exhaust memory on Qpid Broker-J via unbounded GZIP decompression.

Apache Qpid Broker-J through 10.1.0 does not bound output from the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 delivery, message conversion, and HTTP management JSON rendering. An authenticated producer can force unbounded decompression, exhaust memory, and disrupt broker availability. The vendor rates the issue important.

oss-securitySep 24, 23:52 UTC · 2d agoVulnerability 6 sources CVE-2026-92573

CVE-2026-92564: Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

Pre-auth type nesting in Qpid Broker-J through 10.1.0 can stack-overflow the broker.

Apache Qpid Broker-J through 10.1.0 allows unbounded type nesting while processing AMQP 0-8, 0-9, and 0-9-1 field tables before authentication. A remote attacker can trigger a StackOverflowError and potentially cause denial of service. Version 10.1.1 fixes the issue; the vendor rates it important.

oss-securitySep 24, 23:50 UTC · 2d agoVulnerability 6 sources CVE-2026-92564

CVE-2026-92560: Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

Pre-authentication AMQP 0-10 decoding in Apache Qpid Broker-J through 10.1.0 can exhaust memory; 10.1.1 fixes CVE-2026-92560.

Apache disclosed CVE-2026-92560 in Qpid Broker-J through 10.1.0, in the qpid-broker-plugins-amqp-0-10-protocol component. A pre-authentication attacker can abuse type size and count handling in the AMQP 0-10 decoder to force excessive memory allocation and potentially deny service. Version 10.1.1 fixes the issue. The report is credited to n0mi1k, and no exploitation is described.

oss-securitySep 24, 23:49 UTC · 2d agoVulnerability 6 sources CVE-2026-92560

CVE-2026-92550: Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder

Apache Qpid Broker-J through 10.1.0 has a pre-authentication AMQP 0-8/0-9 decoder DoS, CVE-2026-92550, fixed in 10.1.1.

Apache disclosed CVE-2026-92550 in Qpid Broker-J through 10.1.0, affecting qpid-broker-plugins-amqp-0-8-protocol. A pre-authentication attacker can misuse type size and count handling in the AMQP 0-8, 0-9, and 0-9-1 decoder to cause excessive allocation and potential denial of service. Users are advised to upgrade to 10.1.1. Khaled Suliman is credited, and exploitation is not reported.

oss-securitySep 24, 23:47 UTC · 2d agoVulnerability 6 sources CVE-2026-92550

Apache Qpid Broker-J

Timeline6 articles

Related CVEsby mentions

Appears with