CVE-2026-68075: Apache Qpid Broker-J: Incoming session flow control window can be exceeded
An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.
This issue affects Apache Qpid Broker-J: through 10.0.1.
Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Qpid Broker-Jto a version that resolves this vulnerability.Fixed in 10.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68075?
CVE-2026-68075 has a risk scoring of 23, indicating a significant potential impact.
How do I fix CVE-2026-68075?
To fix CVE-2026-68075, users should upgrade to Apache Qpid Broker-J version 10.1.0.
What type of vulnerability is CVE-2026-68075?
CVE-2026-68075 is a denial of service vulnerability due to exceeded session flow control limits.
Who is affected by CVE-2026-68075?
CVE-2026-68075 affects all versions of Apache Qpid Broker-J up to and including 10.0.1.
What could an attacker achieve by exploiting CVE-2026-68075?
An authenticated attacker could exploit CVE-2026-68075 to potentially cause a denial of service.