Login Request a demo
AA
Product
Apache ActiveMQ Broker
by Apache Software Foundation · last CVE Sep 9, 2026
On CISA KEVExploited in the wild
15
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news3Timeline
Severity mix
Critical 0High 11Medium 4Low 0
Severity
All severities15Critical0High11Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Apache ActiveMQ Broker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34197
In wildKEV
8.8
98%
Apr 7
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
Affected: before 5.19.4; 6.0.0 before 6.2.3
CVE-2026-45505
8.8
1%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-41044
8.8
1%
Apr 24
Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia
Affected: before 5.19.6; 6.0.0 before 6.2.5
CVE-2026-40466
8.8
5%
Apr 24
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI
Affected: before 5.19.6; 6.0.0 before 6.2.5
CVE-2026-42588
8.1
1%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-74761
7.5
1%
Sep 9
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId
Affected: 6.0.0 before 6.3.2; before 5.19.11
CVE-2026-49434
7.5
1%
Jun 30
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker
Affected: before 5.19.8; 6.0.0 before 6.2.7
CVE-2026-50750
7.5
1%
Jun 30
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270
Affected: 5.19.7 before 5.19.8; 6.2.6 before 6.2.7
CVE-2026-53917
7.5
1%
Jun 30
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling
Affected: before 5.19.8; 6.0.0 before 6.2.7
CVE-2026-54475
7.5
1%
Jun 30
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover
Affected: before 5.19.8; 6.0.0 before 6.2.7
CVE-2026-39304
7.5
1%
Apr 10
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM
Affected: before 5.19.4; 6.0.0 before 6.2.4
Showing 11