CVE-2026-92564

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.

• CWE-674

• https://lists.apache.org/thread/hw4jkngtkzf0dxdj9mv3z2p71mkpjvx4
• https://www.openwall.com/lists/oss-security/2026/09/24/14

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9255Missing input source validation in the tool authorization pr…8.4
• CVE-2026-92550A pre-authentication attacker could leverage type size/count…7.5
• CVE-2026-92554The ShopLentor – All-in-One WooCommerce Growth & Store Enhan…6.1
• CVE-2026-9256NGINX Plus and NGINX Open Source have a vulnerability in the…8.1
• CVE-2026-92560A pre-authentication attacker could leverage type size/count…7.5
• CVE-2026-92561The Booking Calendar plugin for WordPress is vulnerable to R…6.1
• CVE-2026-92565Rallly before 4.15.0 contains an information disclosure vuln…5.3
• CVE-2026-92566DataGear through 6.0.0 contains a server-side request forger…8.2
• CVE-2026-92567TDuck survey form through version 5.0 contains an authorizat…6.5
• CVE-2026-92568MLRun through 1.11.0 contains a server-side request forgery …5.4
• CVE-2026-92569Hippo4j through 1.5.0 contains a server-side request forgery…4.3
• CVE-2026-92570reNgine through 2.2.0 contains an authorization bypass vulne…6.5