CyberRota Analysis
AI-GeneratedApache Qpid Broker-J versions up to 10.0.1 are vulnerable to a denial-of-service attack, where an authenticated attacker can exploit improper handling of disposition frames with large or illegal ranges, resulting in excessive CPU usage. Organizations using this messaging broker should prioritize upgrading to version 10.1.0 to mitigate this risk and ensure system stability.
CVE
CVE-2026-68077
Severity
MEDIUM
CVSS
6.5
EPSS
0.42%
Apache
Original NVD Description
An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)