CVE-2026-92608: Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10
AI summary · grok-4.7Summaries by Vani AI
Authenticated producers can disrupt AMQP 0-10 delivery on Qpid Broker-J through 10.1.0.
Apache Qpid Broker-J through 10.1.0 incompletely handles property-encoding exceptions when converting AMQP 1.0 messages to AMQP 0-10. An authenticated message producer can send properties the target encoder does not handle and disrupt delivery to AMQP 0-10 consumers. The vendor rates the flaw moderate.
Key facts
- AMQP 1.0-to-0-10 conversion mishandles some property-encoding exceptions.
- Authenticated producers can disrupt delivery to AMQP 0-10 consumers.
- Affects Broker-J through 10.1.0; vendor severity is moderate.
- CVEs
- CVE-2026-92608
- Vendors
- Apache
- Products
- Apache Qpid Broker-J
- Organizations
- Apache Software Foundation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-92608 | Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to… | 7.5 | — |
From the original article
Posted by Daniil Kirilyuk on Sep 24 Severity: moderate Affected versions: - Apache Qpid Broker-J (org. apache. qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0) through 10.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.