OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-87742

HIGH · CVSS 7.5 EPSS 0.76%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A vulnerability in quarkus-websockets-next allows remote attackers to exploit unbounded message buffering, leading to a Denial of Service (DoS) by overwhelming the application with messages faster than it can process them. This results in heap space exhaustion and a java.lang.OutOfMemoryError, ultimately crashing the Java Virtual Machine (JVM). Organizations using this Java framework should prioritize patching to mitigate the risk of service interruptions.

CVE
CVE-2026-87742
Severity
HIGH
CVSS
7.5
EPSS
0.76%
Java

Original NVD Description

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly exhausts heap space, leading to a java.lang.OutOfMemoryError that crashes the Java Virtual Machine (JVM).