Dashboard / CVE-2026-67555

CVE-2026-67555

MEDIUM
MEDIUM Priority: 0.04 BB Relevance: 63/100
Published: 2026-08-05 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
apache qpid_proton-dotnet < 1.1.0

References & Advisories (2)

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.65%
Raw Score 0.006530
Percentile 51.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00653
2026-10-28
0.00653

Intelligence Sources

nvd ref →

External Links