Where
-Infinity
0

Trending

Last week
Last month
Last year

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270

Risk 43
Severity
7.5
First published (updated )
CVE-2026-50750

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover

Risk 46
Severity
7.5
First published (updated )
CVE-2026-54475

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

Risk 46
Severity
7.5
First published (updated )
CVE-2026-53917

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

Risk 46
Severity
7.5
First published (updated )
CVE-2026-53916

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console

Risk 40
Severity
6.1
First published (updated )
CVE-2026-52760
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ActiveMQApache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiation

Risk 46
Severity
7.5
First published (updated )
CVE-2026-50734

Apache ActiveMQApache ActiveMQ: Authenticated web users retain admin access by default in the Web Console

Risk 63
Severity
8.1
First published (updated )
CVE-2026-49877

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker

Risk 46
Severity
7.5
First published (updated )
CVE-2026-49434

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service

Risk 46
Severity
7.5
First published (updated )
CVE-2026-49432

oss-secCVE-2026-54475: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover

First published (updated )
https://seclists.org/oss-sec/2026/q2/1064
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-53917: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWiproperty unmarshalling

First published (updated )
https://seclists.org/oss-sec/2026/q2/1063

oss-secCVE-2026-53916: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

First published (updated )
https://seclists.org/oss-sec/2026/q2/1062

oss-secCVE-2026-52760: Apache ActiveMQ, Apache ActiveMQ Web Console: Stod XSS via Unescaped values in ActiveMQ Web Console

First published (updated )
https://seclists.org/oss-sec/2026/q2/1061

oss-secCVE-2026-49877: Apache ActiveMQ: Authenticated web users tain admin access by default in the Web Console

First published (updated )
https://seclists.org/oss-sec/2026/q2/1058

oss-secCVE-2026-49432: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service

First published (updated )
https://seclists.org/oss-sec/2026/q2/1056
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-49434: Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a mote-properties broker

First published (updated )
https://seclists.org/oss-sec/2026/q2/1057

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)

Risk 37
Severity
5.9
First published (updated )
CVE-2026-49270

Apache ActiveMQApache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by default

Risk 83
Severity
8.8
First published (updated )
CVE-2026-49157

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal

Risk 24
Severity
4.3
First published (updated )
CVE-2026-46605

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass

Risk 83
Severity
8.8
First published (updated )
CVE-2026-45505
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

Risk 63
Severity
8.1
First published (updated )
CVE-2026-42588

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties

Risk 40
Severity
6.1
First published (updated )
CVE-2026-42253

PAN-OS added to KEV, Langflow exploit activity, and a surprising Windows EPSS jump — today's most actionable vulnerability signals [Threat Intel 2026/5/29}

First published (updated )
Social
reddit

Apache ActiveMQ BrokerInput Validation, Code Injection

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2461410

Apache ActiveMQInput Validation, Code Injection

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2461409
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia

Risk 84
Severity
8.8
First published (updated )
CVE-2026-41044

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues

Risk 42
Severity
6.5
First published (updated )
CVE-2026-41043

Apache ActiveMQ BrokerApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI

Risk 84
Severity
8.8
First published (updated )
CVE-2026-40466

The RegisterCISA tells feds to patch 13-year-old Apache ActiveMQ bug under active attack

Exploited
First published (updated )
News
The Register

Apache ActiveMQ ClientDenial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker,…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2457275
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203