Apache Software Foundation Apache ActiveMQ
35 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-74761 | 6.0.0 – < 6.3.2 ; < 5.19.11 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId | HIGH 7.5 | 0.6 % | ||
| CVE-2026-59878 | < 5.19.9 ; 6.0.0 – < 6.2.8 | Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS | HIGH 7.5 | 0.8 % | ||
| CVE-2026-61487 | < 5.19.9 ; 6.0.0 – < 6.2.8 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-49434 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties… | HIGH 7.5 | 0.6 % | ||
| CVE-2026-49432 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service | HIGH 7.5 | 0.8 % | ||
| CVE-2026-49877 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ: Authenticated web users retain admin access by default in the Web Console | HIGH 8.1 | 0.5 % | ||
| CVE-2026-50734 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negoti… | HIGH 7.5 | 0.7 % | ||
| CVE-2026-50750 | 5.19.7 – < 5.19.8 ; 6.2.6 – < 6.2.7 | Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270 | HIGH 7.5 | 0.7 % | ||
| CVE-2026-52760 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console | MEDIUM 6.1 | 0.7 % | ||
| CVE-2026-53916 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec | HIGH 7.5 | 0.7 % | ||
| CVE-2026-53917 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property un… | HIGH 7.5 | 0.7 % | ||
| CVE-2026-54475 | < 5.19.8 ; 6.0.0 – < 6.2.7 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover | HIGH 7.5 | 0.6 % | ||
| CVE-2026-42253 | < 5.19.7 ; 6.0.0 – < 6.2.6 | Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties | MEDIUM 6.1 | 1.1 % | ||
| CVE-2026-42588 | < 5.19.7 ; 6.0.0 – < 6.2.6 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector | HIGH 8.1 | 0.7 % | ||
| CVE-2026-45505 | < 5.19.7 ; 6.0.0 – < 6.2.6 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass | HIGH 8.8 | 0.6 % | ||
| CVE-2026-46605 | < 5.19.7 ; 6.0.0 – < 6.2.6 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-49157 | < 5.19.7 ; 6.0.0 – < 6.2.6 | Apache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management capability by default | HIGH 8.8 | 0.4 % | ||
| CVE-2026-49270 | 5.14.0 – < 5.19.7 ; 6.0.0 – < 6.2.6 | Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire) | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-41044 | < 5.19.6 ; 6.0.0 – < 6.2.5 | Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jol… | HIGH 8.8 | 1.0 % | ||
| CVE-2026-41043 | < 5.19.6 ; 6.0.0 – < 6.2.5 | Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-40466 | < 5.19.6 ; 6.0.0 – < 6.2.5 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI | HIGH 8.8 | 4.8 % | ||
| CVE-2026-39304 | < 5.19.4 ; 6.0.0 – < 6.2.4 | Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be expl… | HIGH 7.5 | 0.9 % | ||
| CVE-2026-40046 | 6.0.0 – < 6.2.4 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is… | HIGH 7.5 | 0.4 % | ||
| CVE-2026-33227 | < 5.19.3 ; 6.0.0 – < 6.2.2 | Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathn… | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-34197 | < 5.19.4 ; 6.0.0 – < 6.2.3 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans | HIGH 8.8 | 98 % | KEV | |
| CVE-2025-66168 | < 5.19.2 ; 6.0.0 – < 6.1.9 ; 6.2.0 – < 6.2.1 | Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly vali… | HIGH 8.8 | 0.8 % | ||
| CVE-2025-27533 | 6.0.0 – < 6.1.6 ; 5.18.0 – < 5.18.7 ; 5.17.0 – < 5.17.7 ; … | Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation | MEDIUM 6.9 | 9.0 % | ||
| CVE-2024-32114 | 6.0.0 – 6.1.1 | Apache ActiveMQ: Jolokia and REST API were not secured with default configuration | HIGH 8.8 | 7.1 % | ||
| CVE-2022-41678 | < 5.16.6 ; 5.17.0 – < 5.17.4 | Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE | HIGH 8.8 | 86 % | ||
| CVE-2023-46604 | 5.18.0 – < 5.18.3 ; 5.17.0 – < 5.17.6 ; 5.16.0 – < 5.16.7 ; … | Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code exec… | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2021-26117 | Apache ActiveMQ Artemis – < 2.16.0 ; Apache ActiveMQ – < 5.16.1 | ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind | HIGH 7.5 | 11 % | ||
| CVE-2018-8006 | 5.0.0 to 5.15.5 | An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp pa | MEDIUM 6.1 | 56 % | ||
| CVE-2018-11775 | 5.0.0 - 5.15.5 | TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM a | HIGH 7.4 | 7.0 % | ||
| CVE-2017-15709 | Apache ActiveMQ 5.14.0 to 5.15.2 | When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel v | LOW 3.7 | 23 % | ||
| CVE-2016-6810 | 5.0.0 to 5.14.1 | In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based admi | MEDIUM 6.1 | 6.1 % |