AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-68080

MEDIUM · CVSS 6.5 EPSS 0.42%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Apache Qpid Broker-J versions up to 10.0.1 are vulnerable to a resource exhaustion attack, where an authenticated attacker can manipulate the broker's response rate to an echo flow, leading to excessive resource consumption and potential denial of service. Organizations using this messaging broker should prioritize upgrading to version 10.1.0 to mitigate the risk of service disruption.

CVE
CVE-2026-68080
Severity
MEDIUM
CVSS
6.5
EPSS
0.42%
Apache

Original NVD Description

It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)