As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-114230: Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames
Apache Qpid Proton C through version 0.40.0 contains a flaw where regular AMQP frames sent as SASL frames during peer authentication can bypass SASL validation. The application receives frames without a username set, and the security impact depends on how the application handles unauthenticated connections.
Why it matters: Developers using Apache Qpid Proton C must evaluate whether their applications properly reject or isolate connections that bypass SASL authentication, as the vulnerability creates a path for unauthenticated access that may not trigger expected authentication failure handling.
- Source published
- First seen by Cybersecurity Tracker