CyberRota Analysis
AI-GeneratedApache Qpid Broker-J versions up to 10.0.1 are vulnerable to a pre-authentication attack that exploits unbounded symbol value caching, potentially leading to resource exhaustion and denial of service. Organizations using this messaging broker should prioritize upgrading to version 10.1.0 to mitigate the risk of service disruption.
CVE
CVE-2026-68074
Severity
HIGH
CVSS
7.5
EPSS
0.49%
Apache
Original NVD Description
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)