CVE-2026-92564: Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

As cited

Copy frozen at 2026-09-25 03:53 UTC (site build).

vulnerabilities

CVE-2026-92564: Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

Apache Qpid Broker-J versions through 10.1.0 contain a pre-authentication denial of service vulnerability in AMQP field-table processing. A remote attacker could exploit unbounded type nesting to trigger a stack overflow and crash the broker without requiring credentials. Remediation involves upgrading to version 10.1.1.

Why it matters: Organizations running Apache Qpid Broker-J through 10.1.0 face unauthenticated service disruption risk; apply the 10.1.1 patch immediately to restore availability.

Source published

2026-09-24 23:50 UTC

First seen by Cybersecurity Tracker

2026-09-25 00:05 UTC