Denial of Service Vulnerability in Apache Qpid Broker-J
CVE-2026-92550

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Qpid Broker-j
Vendor
CVE Published:
25 September 2026

What is CVE-2026-92550?

A vulnerability has been identified in Apache Qpid Broker-J where an unauthorized attacker can exploit type size/count handling to trigger excessive memory allocation. This can result in a denial of service, compromising the availability of the service. Users are strongly encouraged to upgrade to version 10.1.1 to mitigate this issue and enhance the security of their systems.

Affected Version(s)

Apache Qpid Broker-J 0 <= 10.1.0

References

https://lists.apache.org/thread/56w1kxz9h23q364ffyvj7cssd...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khaled Suliman of AISLE Research
n0mi1k
.