Vulnerabilities

TI-2026-36592 CVE-2026-49434 · GHSA-h5gm-rvw6-2xpx

Improper input validation in Apache ActiveMQ Broker

MEDIUM 40

Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0063 Published 2026-06-30 Partial fix · 5.19.8, 6.2.7 CWE-20

TI-2026-36590 CVE-2026-49432 · GHSA-xjwq-9jw5-jf7w

MEDIUM 40

Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2026-06-30 Partial fix · 5.19.8, 6.2.7 CWE-20

TI-2026-36775 CVE-2026-49877 · GHSA-f892-4h9f-j7g9

LOW 38

Improper Authorization vulnerability in Apache ActiveMQ.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00513 Published 2026-06-30 Fixed in 5.19.8, 6.2.7 CWE-285

TI-2026-37397 CVE-2026-50734 · GHSA-7259-vf48-52q3

MEDIUM 40

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2026-06-30 Partial fix · 5.19.8, 6.2.7 CWE-789

TI-2026-37413 CVE-2026-50750 · GHSA-9qj4-v6r6-3wmx

MEDIUM 40

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00686 Published 2026-06-30 Fixed in 5.19.8, 6.2.7 CWE-400

TI-2026-37878 CVE-2026-52760 · GHSA-j548-68g5-9j7x

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00679 Published 2026-06-30 Fixed in 5.19.8, 6.2.7 CWE-79

TI-2026-38892 CVE-2026-53916 · GHSA-2q9g-8573-3265

MEDIUM 40

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2026-06-30 Partial fix · 5.19.8, 6.2.7 CWE-789

TI-2026-38893 CVE-2026-53917 · GHSA-f77w-px59-cqf5

MEDIUM 40

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2026-06-30 Partial fix · 5.19.8, 6.2.7 CWE-789

TI-2026-39329 CVE-2026-54475 · GHSA-mhp6-f224-j2c3

MEDIUM 40

Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00563 Published 2026-06-30 Partial fix · 5.19.8, 6.2.7 CWE-862