Advisory severityHigh7.5Red Hat Linux

High [CVE-2026-92609] org.apache.qpid/qpid-broker-plugins-management-http: Apache Qpid Broker-J: Unauthorized management session access via session fixation

This high-severity Red Hat Linux advisory covers CVE-2026-92609; related products: Red Hat Fuse 7.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-92609 Source published Sep 25, 2026Source updated Sep 25, 2026

VulniPulse record published Sep 26, 2026Record updated Sep 28, 2026

CVE-2026-92609

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

org.apache.qpid/qpid-broker-plugins-management-http: Apache Qpid Broker-J: Unauthorized management session access via session fixation. Red Hat rates this important (CVSS 7.5).

Weakness: CWE-613.

Affected product named by the advisory: Red Hat Fuse 7.

Affected versions

10.1.0

Official advisory · high-confidence parse· fetched 8 days ago·verify at source

Fixed versions

10.1.1

Official advisory · high-confidence parse· fetched 8 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Restrict access to the HTTP management port to trusted administrative hosts or localhost: 1. Limit management port access using `firewalld` to allow only authorized administrative IP addresses: ``` firewall-cmd --permanent --zone=trusted --add-source=<ADMIN_IP> firewall-cmd --reload ``` Alternatively, configure the broker management HTTP connector to bind exclusively to localhost (`127.0.0.1`), or restrict external reachability using perimeter network controls. 2. Caveats: Restricting access to the HTTP management interface will block administrative connections originating outside designated trusted networks or hosts. Warning: Modifying firewall rules and reloading the firewall configuration may temporarily interrupt active network connections.

Official advisory · high-confidence parse· fetched 8 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.