CyberRota Analysis
AI-GeneratedApache Qpid Proton-J versions up to 0.34.1 are vulnerable to a denial-of-service attack due to improper handling of crafted disposition frames, which can lead to excessive CPU usage. Authenticated attackers can exploit this vulnerability to disrupt service availability. Organizations using affected versions should prioritize upgrading to version 0.35.0 to mitigate this risk.
CVE
CVE-2026-66276
Severity
MEDIUM
CVSS
6.5
EPSS
0.42%
Apache
Original NVD Description
An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)