Advisories · Technology

Apache Software Foundation Apache ActiveMQ.

Every CVE that names Apache Software Foundation Apache ActiveMQ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108500 CVE record

Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injection
- Apache Software Foundation Apache ActiveMQ
- CWE-20
Not analysed yet 4 Nov 2026
CVE-2026-108946 CVE record

Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection
- Apache Software Foundation Apache ActiveMQ
- Apache Software Foundation ActiveMQ Broker
- CWE-20
Not analysed yet 4 Nov 2026
CVE-2026-111822 CVE record

Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocation
- Apache Software Foundation Apache ActiveMQ
- Apache Software Foundation Apache ActiveMQ Runtime Config
Not analysed yet 4 Nov 2026
CVE-2026-111821 CVE record

Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal
- Apache Software Foundation Apache ActiveMQ
- Apache Software Foundation Apache ActiveMQ KahaDB
- CWE-20
Not analysed yet 4 Nov 2026
CVE-2026-108949 CVE record

CVSS 6.5 Medium

Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM
- Apache Software Foundation Apache ActiveMQ
- Apache Software Foundation ActiveMQ Broker
- Denial of service
Not analysed yet 4 Nov 2026
CVE-2026-74761 CVE record

CVSS 7.5 High

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId
- Apache Software Foundation Apache ActiveMQ Broker
- Apache Software Foundation Apache ActiveMQ All
- CWE-20
Not analysed yet 9 Sept 2026
CVE-2026-59878 CVE record

CVSS 7.5 High

Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS
- Apache Software Foundation Apache ActiveMQ AMQP
- Apache Software Foundation Apache ActiveMQ
- CWE-20
Not analysed yet 28 Jul 2026
CVE-2026-61487 CVE record

CVSS 6.5 Medium

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations
- Apache Software Foundation Apache ActiveMQ Broker
- Apache Software Foundation Apache ActiveMQ All
- Broken access control
Not analysed yet 28 Jul 2026
CVE-2026-53916 CVE record

CVSS 7.5 High

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec
- Apache Software Foundation Apache ActiveMQ
- Apache Software Foundation Apache ActiveMQ All
- Denial of service
Not analysed yet 30 Jun 2026