THREATOPS
THREAT OPSThreat News › CVE-2026-68077: Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service

CVE-2026-68077: Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service

medoss_secPublished 2026-08-04

<p>Posted by Daniil Kirilyuk on Aug 04</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Qpid Broker-J (org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol) through 10.0.1<br /> <br /> Description:<br /> <br /> An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to <br /> naive range handling, leading to

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/418