Cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aapacheqpid_proton/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 22:24:34 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgApache Qpid Proton C: Stack buffer overflow read in TLS certificate validation (CVE-2026-115942)https://feed.craftedsignal.io/briefs/2026-10-apache-qpid-proton-c-buffer-overflow/Wed, 28 Oct 2026 22:24:34 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-apache-qpid-proton-c-buffer-overflow/Apache Qpid Proton C versions through 0.40.0 contain a stack buffer overflow read vulnerability triggered by misconfigured wildcard TLS certificates.<p>Apache Qpid Proton C versions through 0.40.0 are affected by a stack buffer overflow read caused by the verification of non-compliant wildcard TLS certificates. The issue does not affect certificates issued to the RFC9525 standard. Version 0.41.1 has been released to fix this issue by only accepting certificates that comply with the RFC9525 standard.</p> highadvisory