CVE-2026-59320 — MEDIUM (6.5)

Q: How severe is CVE-2026-59320?

CVE-2026-59320 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-59320?

Check the references section above for vendor advisories and patch information. Affected products include: Vmware Spring Advanced Message Queuing Protocol.

Vulnerability Description

When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the listener silently stalled while isRunning() remains true. Spring AMQP 4.1.0

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Vmware	Spring Advanced Message Queuing Protocol	>= 4.1.0, < 4.1.1

Related Weaknesses (CWE)

CWE-772

References

https://spring.io/security/cve-2026-59320Vendor Advisory

FAQ

What is CVE-2026-59320?

CVE-2026-59320 is a vulnerability with a CVSS score of 6.5 (MEDIUM). When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 1...

How severe is CVE-2026-59320?

CVE-2026-59320 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-59320?

Check the references section above for vendor advisories and patch information. Affected products include: Vmware Spring Advanced Message Queuing Protocol.