AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-67554

MEDIUM · CVSS 6.5 EPSS 0.41%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Apache Qpid Proton-Dotnet versions up to 1.0.0 are vulnerable to a denial of service attack, where an authenticated attacker can exploit naive range handling in crafted disposition frames, resulting in excessive CPU usage. Organizations using this software should prioritize upgrading to version 1.1.0 to mitigate this risk. This vulnerability is particularly relevant for environments where authenticated access is granted, as it could be exploited to disrupt service availability.

CVE
CVE-2026-67554
Severity
MEDIUM
CVSS
6.5
EPSS
0.41%
Apache

Original NVD Description

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)