org.apache.qpid:qpid-broker-plugins-management-http vulnerabilities

CVEs whose affected-version data names the org.apache.qpid:qpid-broker-plugins-management-http package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92609Critical· 9.8

today

Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a session identifier retained across successful authentication. This issue affect…

Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a session identifier retained across successful authentication. This issue affect…

▾ MidnightApache Software Foundation · org.apache.qpid:qpid-broker-plugins-management-httpEPSS 0.19%via NVD