Threats affecting pkg:maven/Apache Software Foundation/org.apache.qpid:qpid-broker-plugins-management-http

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-92609Apache Qpid Broker-J · Session Fixation Critical9.8EPSS 0.5%2026-09-25CVE Database V5CVE-2026-92609 Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a session identifier retained across successful authentication. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue. EPSS 0.5%Vulnerability Apache Software Foundation CWE-384	CVE Database V5	2026-09-25

Page 1 of 1