Apache Activemq All (Apache Software Foundation) - vulnerabilities (CVEs)
20 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-09. Vendor: Apache Software Foundation.
CVEs of Apache Activemq All
- CVE-2026-74761 - CVSS 7.5 (high), 2026-09-09: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can…
- CVE-2026-59878 - CVSS 7.5 (high), 2026-07-28: Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed…
- CVE-2026-61487 - CVSS 6.5 (medium), 2026-07-28: Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a…
- CVE-2026-49434 - CVSS 7.5 (high), 2026-06-30: Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. An attacker that has access to publish or modify…
- CVE-2026-49432 - CVSS 7.5 (high), 2026-06-30: Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an…
- CVE-2026-50734 - CVSS 7.5 (high), 2026-06-30: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All. An unauthenticated network attacker…
- CVE-2026-50750 - CVSS 7.5 (high), 2026-06-30: Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an…
- CVE-2026-53916 - CVSS 7.5 (high), 2026-06-30: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens…
- CVE-2026-53917 - CVSS 7.5 (high), 2026-06-30: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An…
- CVE-2026-54475 - CVSS 7.5 (high), 2026-06-30: Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are…
- CVE-2026-49270 - CVSS 5.9 (medium), 2026-06-01: Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Brokers that are configured…
- CVE-2026-46605 - CVSS 4.3 (medium), 2026-06-01: Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with…
- CVE-2026-45505 - CVSS 8.8 (high), 2026-06-01: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache…
- CVE-2026-42588 - CVSS 8.1 (high), 2026-06-01: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache…
- CVE-2026-41044 - CVSS 8.8 (high), 2026-04-24: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ…
- CVE-2026-40466 - CVSS 8.8 (high), 2026-04-24: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache…
- CVE-2026-39304 - CVSS 7.5 (high), 2026-04-10: Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not…
- CVE-2026-40046 - CVSS 7.5 (high), 2026-04-09: Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for "CVE-2025-66168: MQTT control packet…
- CVE-2026-34197 - CVSS 8.8 (high), 2026-04-07: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ…
- CVE-2026-33227 - CVSS 4.3 (medium), 2026-04-07: Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache…
