Login Request a demo
AB
Product
Activemq Broker
by Apache · last CVE Sep 9, 2026
On CISA KEVExploited in the wild
15
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news3Timeline
Severity mix
Critical 0High 11Medium 4Low 0
Severity
All severities15Critical0High11Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Activemq Broker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34197
In wildKEV
8.8
98%
Apr 7
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
Affected: before 5.19.4; 6.0.0 before 6.2.3
CVE-2026-45505
8.8
1%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-41044
8.8
1%
Apr 24
Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia
Affected: before 5.19.6; 6.0.0 before 6.2.5
CVE-2026-40466
8.8
5%
Apr 24
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI
Affected: before 5.19.6; 6.0.0 before 6.2.5
CVE-2026-42588
8.1
1%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-74761
7.5
1%
Sep 9
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId
Affected: before 5.19.11; 6.2.0 before 6.3.2
CVE-2026-49434
7.5
1%
Jun 30
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker
Affected: before 5.19.8; 6.0.0 before 6.2.7
CVE-2026-50750
7.5
1%
Jun 30
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270
Affected: 5.19.7; 6.2.6
CVE-2026-53917
7.5
1%
Jun 30
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling
Affected: before 5.19.8; 6.0.0 before 6.2.7
CVE-2026-54475
7.5
1%
Jun 30
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover
Affected: before 5.19.8; 6.0.0 before 6.2.7
CVE-2026-39304
7.5
1%
Apr 10
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM
Affected: before 5.19.4; 6.0.0 before 6.2.4
CVE-2026-61487
6.5
0%
Jul 28
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations
Affected: before 5.19.9; 6.0.0 before 6.2.8
CVE-2026-49270
5.9
0%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-46605
4.3
0%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-33227
4.3
0%
Apr 7
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory
Affected: before 5.19.3; 6.0.0 before 6.2.2
Showing 15