Eclipse Openmq (Eclipse Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-05. Vendor: Eclipse Foundation.

CVEs of Eclipse Openmq

• CVE-2026-24457 - CVSS 9.8 (critical), 2026-03-05: An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server.…
• CVE-2026-22886 - CVSS 9.8 (critical), 2026-03-03: OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication. However, the product ships with a default administrative…