CVE-2026-92609
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 25, 2026
Vendor
unknown
Description
Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a session identifier retained across successful authentication. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.