Where
-Infinity
0

Trending

Last week
Last month
Last year

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

Risk 38
Severity
6.5
First published (updated )
CVE-2026-61487

oss-secCVE-2026-61487: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

First published (updated )
https://seclists.org/oss-sec/2026/q3/288

Apache ActiveMQ AMQPApache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Risk 46
Severity
7.5
First published (updated )
CVE-2026-59878

oss-secCVE-2026-59878: Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

First published (updated )
https://seclists.org/oss-sec/2026/q3/287

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270

Risk 43
Severity
7.5
First published (updated )
CVE-2026-50750
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover

Risk 46
Severity
7.5
First published (updated )
CVE-2026-54475

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

Risk 46
Severity
7.5
First published (updated )
CVE-2026-53917

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

Risk 46
Severity
7.5
First published (updated )
CVE-2026-53916

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console

Risk 40
Severity
6.1
First published (updated )
CVE-2026-52760

Apache ActiveMQApache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiation

Risk 46
Severity
7.5
First published (updated )
CVE-2026-50734
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ActiveMQApache ActiveMQ: Authenticated web users retain admin access by default in the Web Console

Risk 63
Severity
8.1
First published (updated )
CVE-2026-49877

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker

Risk 46
Severity
7.5
First published (updated )
CVE-2026-49434

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service

Risk 46
Severity
7.5
First published (updated )
CVE-2026-49432

oss-secCVE-2026-54475: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover

First published (updated )
https://seclists.org/oss-sec/2026/q2/1064

oss-secCVE-2026-53917: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWiproperty unmarshalling

First published (updated )
https://seclists.org/oss-sec/2026/q2/1063
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-53916: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

First published (updated )
https://seclists.org/oss-sec/2026/q2/1062

oss-secCVE-2026-52760: Apache ActiveMQ, Apache ActiveMQ Web Console: Stod XSS via Unescaped values in ActiveMQ Web Console

First published (updated )
https://seclists.org/oss-sec/2026/q2/1061

oss-secCVE-2026-49877: Apache ActiveMQ: Authenticated web users tain admin access by default in the Web Console

First published (updated )
https://seclists.org/oss-sec/2026/q2/1058

oss-secCVE-2026-49432: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service

First published (updated )
https://seclists.org/oss-sec/2026/q2/1056

oss-secCVE-2026-49434: Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a mote-properties broker

First published (updated )
https://seclists.org/oss-sec/2026/q2/1057
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)

Risk 38
Severity
5.9
First published (updated )
CVE-2026-49270

Apache ActiveMQApache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by default

Risk 84
Severity
8.8
First published (updated )
CVE-2026-49157

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal

Risk 24
Severity
4.3
First published (updated )
CVE-2026-46605

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass

Risk 84
Severity
8.8
First published (updated )
CVE-2026-45505

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

Risk 64
Severity
8.1
First published (updated )
CVE-2026-42588
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties

Risk 40
Severity
6.1
First published (updated )
CVE-2026-42253

PAN-OS added to KEV, Langflow exploit activity, and a surprising Windows EPSS jump — today's most actionable vulnerability signals [Threat Intel 2026/5/29}

First published (updated )
Social
reddit

Apache ActiveMQ BrokerInput Validation, Code Injection

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2461410

Apache ActiveMQInput Validation, Code Injection

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2461409

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia

Risk 84
Severity
8.8
First published (updated )
CVE-2026-41044
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203