AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-66273

HIGH · CVSS 7.5 EPSS 0.43%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Apache Qpid Proton-J versions up to 0.34.1 are vulnerable to a pre-authentication attack that exploits type size and count handling, potentially leading to excessive memory allocation and denial of service. Organizations using affected versions should prioritize upgrading to version 0.35.0 to mitigate this risk and ensure service availability.

CVE
CVE-2026-66273
Severity
HIGH
CVSS
7.5
EPSS
0.43%
Apache

Original NVD Description

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)