News · via oss-security
CVE-2026-92609: Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication
Posted by Daniil Kirilyuk on Sep 24 Severity: important Affected versions: - Apache Qpid Broker-J (org.apache.qpid:qpid-broker-plugins-management-http) through 10.1.0 Description: Session fixation in…