CVE-2026-66257

High

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.…

[email protected]·CWE-770·Published 2026-08-05

CVSS

7.5

EPSS

0.00

KEV

Exploits

Vendor statements (1)

lists.apache.org

cve.orgen

268 chars

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue.

NVDen

268 chars

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	ENISA EUVD	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H