Apache Qpid Broker-J

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions6
First seenSep 24, 2026
Last mentionedSep 24, 2026

Timeline

6 articles · newest first

CVE-2026-92609: Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication

Apache Qpid Broker-J through 10.1.0 has a session-fixation flaw in HTTP management authentication.

oss-securitySep 24, 23:55 UTC · Sep 24, 2026Vulnerability 6 sourcesCVE-2026-926091 · 1 read

CVE-2026-92608: Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10

Authenticated producers can disrupt AMQP 0-10 delivery on Qpid Broker-J through 10.1.0.

oss-securitySep 24, 23:54 UTC · Sep 24, 2026Vulnerability 6 sourcesCVE-2026-926081 · 1 read

CVE-2026-92573: Apache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering

Authenticated producers can exhaust memory on Qpid Broker-J via unbounded GZIP decompression.

oss-securitySep 24, 23:52 UTC · Sep 24, 2026Vulnerability 6 sourcesCVE-2026-925731

CVE-2026-92564: Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

Pre-auth type nesting in Qpid Broker-J through 10.1.0 can stack-overflow the broker.

oss-securitySep 24, 23:50 UTC · Sep 24, 2026Vulnerability 6 sourcesCVE-2026-925642 · 1 read

CVE-2026-92560: Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

Pre-authentication AMQP 0-10 decoding in Apache Qpid Broker-J through 10.1.0 can exhaust memory; 10.1.1 fixes CVE-2026-92560.

oss-securitySep 24, 23:49 UTC · Sep 24, 2026Vulnerability 6 sourcesCVE-2026-925601

CVE-2026-92550: Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder

Apache Qpid Broker-J through 10.1.0 has a pre-authentication AMQP 0-8/0-9 decoder DoS, CVE-2026-92550, fixed in 10.1.1.

oss-securitySep 24, 23:47 UTC · Sep 24, 2026Vulnerability 6 sourcesCVE-2026-925501 · 1 read

Related CVEs

by mentions

CVE-2026-926099.8
Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a…
published Sep 25, 2026apache qpid broker-j
CVE-2026-925607.5
Pre-Auth Memory-Exhaustion Denial of Service in Apache Qpid Broker-J AMQP 0-10 Decoder
published Sep 25, 2026Apache Qpid Broker-J
CVE-2026-925647.5
Pre-Auth Stack Overflow DoS in Apache Qpid Broker-J AMQP Field-Table Parsing
published Sep 25, 2026Apache Qpid Broker-J
CVE-2026-925507.5
Unauthenticated Memory-Exhaustion DoS in Apache Qpid Broker-J AMQP 0-8/0-9/0-9-1 Decoder
published Sep 25, 2026Apache Qpid Broker-J
CVE-2026-926087.5
Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to…
published Sep 25, 2026apache qpid broker-j
CVE-2026-925736.5
GZIP Decompression Memory-Exhaustion DoS in Apache Qpid Broker-J
published Sep 25, 2026Apache Qpid Broker-J

Appears with

Apache Software Foundationorganization · 6
Apachevendor · 6

Entities are extracted by the model from each article. First seen Sep 24, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.