CVE-2026-68080
Medium · 6.5CVSS
6.5
EPSS
0.7%
Published
Aug 5, 2026
CISA due date
—
The record
It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-54609 QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. CWE-406
- CVE-2026-50045 In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a… CWE-406
- CVE-2026-45557 Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched… CWE-406
- GHSA-7hmv-4j2j-pp6f PocketMine-MP: Network amplification vulnerability with `ActorEventPacket` CWE-406
- GHSA-h656-5vcf-cm23 OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before… CWE-406