This vulnerability involves improper input validation in Red Hat AMQ Broker 7 related to HTTP/2 and HTTP/3 Extended CONNECT requests being downgraded as regular CONNECT requests. This flaw can allow an attacker to provide unexpected input values that may cause program crashes, excessive resource consumption, or arbitrary control over resource allocation. The integrity impact is high, potentially enabling modification of memory or execution of unauthorized commands. The issue is tracked under CVE-2026-93568 with a CVSS v3.1 score of 7.5 and is documented by Red Hat with references to a related Netty security advisory for remediation guidance.

The vulnerability can lead to high integrity impact, including the possibility of modifying memory or executing unauthorized commands. It may also cause denial of service conditions through crashes or resource exhaustion. Confidentiality impact is not indicated. There are no known exploits in the wild at this time.

Red Hat references the Netty security advisory (https://github.com/netty/netty/security/advisories/GHSA-w6j8-x45j-w75f) for fixed versions and remediation guidance. Customers should consult this advisory for patch availability and apply updates accordingly. No direct Red Hat patch information is provided yet, so patch status is not confirmed. Monitor the Red Hat advisory page for updates and apply fixes when available.