Advisories · Technology

Apache Software Foundation Apache ActiveMQ All.

Every CVE that names Apache Software Foundation Apache ActiveMQ All among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-74761 CVE record

CVSS 7.5 High

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId
- Apache Software Foundation Apache ActiveMQ Broker
- Apache Software Foundation Apache ActiveMQ All
- CWE-20
Not analysed yet 9 Sept 2026
CVE-2026-59878 CVE record

CVSS 7.5 High

Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS
- Apache Software Foundation Apache ActiveMQ AMQP
- Apache Software Foundation Apache ActiveMQ
- CWE-20
Not analysed yet 28 Jul 2026
CVE-2026-61487 CVE record

CVSS 6.5 Medium

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations
- Apache Software Foundation Apache ActiveMQ Broker
- Apache Software Foundation Apache ActiveMQ All
- Broken access control
Not analysed yet 28 Jul 2026
CVE-2026-53916 CVE record

CVSS 7.5 High

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec
- Apache Software Foundation Apache ActiveMQ
- Apache Software Foundation Apache ActiveMQ All
- Denial of service
Not analysed yet 30 Jun 2026