AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-67465

HIGH · CVSS 7.5 EPSS 0.49%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Apache Qpid Proton-Dotnet versions up to 1.0.0 are vulnerable to a pre-authentication attack that exploits unbounded symbol value caching, potentially leading to resource exhaustion and denial of service. Organizations utilizing this messaging framework should prioritize upgrading to version 1.1.0 to mitigate the risk of service disruption.

CVE
CVE-2026-67465
Severity
HIGH
CVSS
7.5
EPSS
0.49%
Apache

Original NVD Description

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)