Vulnerabilities

TI-2026-30868 CVE-2026-42588 · GHSA-hg6c-8mvr-jqc9

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

LOW 39

Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0074 Published 2026-06-01 Partial fix · 5.19.7, 6.2.6 CWE-20

TI-2026-33275 CVE-2026-45505 · GHSA-v853-w46p-fv2h

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass

MEDIUM 41

Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.006 Published 2026-06-01 Partial fix · 5.19.7, 6.2.6 CWE-20

TI-2026-34264 CVE-2026-46605 · GHSA-cpw7-g3p5-qrfq

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal

LOW 20

Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-06-01 Partial fix · 5.19.7, 6.2.6 CWE-285

TI-2026-36462 CVE-2026-49270 · GHSA-hf52-78x8-6w3w

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription…

LOW 27

Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00369 Published 2026-06-01 Partial fix · 5.19.7, 6.2.6 CWE-1230

Vulnerabilities

Filters

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription…