THREAT OPS › Threat News › CVE-2026-67588: Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
CVE-2026-67588: Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
<p>Posted by Timothy A. Bish on Aug 04</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Qpid ProtonJ2 (org.apache.qpid:protonj2) through 1.1.0<br /> <br /> Description:<br /> <br /> A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to <br /> denial of service.<br /> <br /> This issue affects Apache Qpid Pro
Indicators of compromise
- CVE-2026-67588cve
- https://qpid.apache.org/url
Original source: https://seclists.org/oss-sec/2026/q3/427