CVE-2026-68080mediumCWE-406

CVE-2026-68080: medium-severity vulnerability in Apache Qpid Broker-J

Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service

Published

Follow this CVE+ Monitor Apache Qpid Broker-J

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.7%
It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Apache Software Foundation · Apache Qpid Broker-J
Related CVEs — Apache Qpid Broker-J

In the same product, most dangerous first.

CVE-2016-8741—CVE-2016-8741EPSS 6.3%CVE-2017-15702—CVE-2017-15702EPSS 6.2%CVE-2017-15701—CVE-2017-15701EPSS 4.4%CVE-2019-0200—CVE-2019-0200EPSS 3.8%CVE-2018-8030—CVE-2018-8030EPSS 3.8%CVE-2018-1298—CVE-2018-1298EPSS 2.3%