Apache Software Foundation Apache ActiveMQ Client
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-50734 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negoti… | HIGH 7.5 | 0.7 % | ||
| CVE-2026-53917 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property un… | HIGH 7.5 | 0.7 % | ||
| CVE-2026-39304 | < 5.19.4 ; 6.0.0 – < 6.2.4 | Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be expl… | HIGH 7.5 | 0.9 % | ||
| CVE-2026-33227 | < 5.19.3 ; 6.0.0 – < 6.2.2 | Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathn… | MEDIUM 4.3 | 0.4 % |