Login Request a demo
AA
Product
Apache ActiveMQ Broker
by Apache Software Foundation · last CVE Sep 9, 2026
On CISA KEVExploited in the wild
15
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news3Timeline
Severity mix
Critical 0High 11Medium 4Low 0
Severity
All severities15Critical0High11Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Apache ActiveMQ Broker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-61487
6.5
0%
Jul 28
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations
Affected: before 5.19.9; 6.0.0 before 6.2.8
CVE-2026-49270
5.9
0%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)
Affected: 5.14.0 before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-46605
4.3
0%
Jun 1
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal
Affected: before 5.19.7; 6.0.0 before 6.2.6
CVE-2026-33227
4.3
0%
Apr 7
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory
Affected: before 5.19.3; 6.0.0 before 6.2.2
Showing 4