THREAT OPS › Threat News › CVE-2026-66275: Apache Qpid Proton-J: Incoming session flow control window can be exceeded
CVE-2026-66275: Apache Qpid Proton-J: Incoming session flow control window can be exceeded
<p>Posted by Robbie Gemmell on Aug 04</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Qpid Proton-J (org.apache.qpid:proton-j) through 0.34.1<br /> <br /> Description:<br /> <br /> An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of <br /> service.<br /> <br /> This issue affects Apache Qpid Proton-J: throug
Indicators of compromise
- CVE-2026-66275cve
- https://qpid.apache.org/url
Original source: https://seclists.org/oss-sec/2026/q3/411