CVE-2026-67592

7.5 HIGH

Published 2026-08-05 · Updated 2026-08-07

AI risk analysis

Summary: The flaw allows an authenticated attacker to cause excessive resource usage by controlling the number of transfer frames per incoming delivery, potentially leading to a denial of service.
Exploitability: Exploitation requires authentication and control over incoming delivery frames; moderately difficult.
Blast radius: If exploited, it could impact system availability, causing potential Denial of Service for affected services.
Prioritized remediation: Upgrade to Apache Qpid ProtonJ2 version 1.2.0 to address the issue.

dosauth-requiredresource-exhaustion

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-770

Vendors

apache

Products

qpid protonj2

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.