THREAT OPS › Threat News › CVE-2026-67554: Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service
CVE-2026-67554: Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service
<p>Posted by Timothy A. Bish on Aug 04</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Qpid Proton Dotnet (org.apache.qpid) through 1.0.0<br /> <br /> Description:<br /> <br /> An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to <br /> naive range handling, leading to denial of service.<br /> <br /> T
Indicators of compromise
- CVE-2026-67554cve
Original source: https://seclists.org/oss-sec/2026/q3/425