Skip to content

Vulnerabilities of Apache Software Foundation Apache ActiveMQ

Is your version affected?

CVE Summary Score Published
CVE-2026-108500 Apache ActiveMQ: LDAPAuthorizationMap allows authorization bypass via DN injection Not rated Nov 4, 2026
CVE-2026-108946 Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection Not rated Nov 4, 2026
CVE-2026-111822 Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocation Not rated Nov 4, 2026
CVE-2026-111821 Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal Not rated Nov 4, 2026
CVE-2026-108949 Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM Not rated Nov 4, 2026
CVE-2026-74761 Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all… Not rated Sep 9, 2026
CVE-2026-59878 Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All Not rated Jul 28, 2026
CVE-2026-61487 Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Not rated Jul 28, 2026
CVE-2026-49434 Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All Not rated Jun 30, 2026
CVE-2026-49432 Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp Not rated Jun 30, 2026
CVE-2026-49877 Improper Authorization vulnerability in Apache ActiveMQ Not rated Jun 30, 2026
CVE-2026-50734 Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ… Not rated Jun 30, 2026
CVE-2026-50750 Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All Not rated Jun 30, 2026
CVE-2026-52760 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ,… Not rated Jun 30, 2026
CVE-2026-53916 Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp Not rated Jun 30, 2026
CVE-2026-53917 Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ… Not rated Jun 30, 2026
CVE-2026-54475 Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Not rated Jun 30, 2026
CVE-2026-42253 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ,… Not rated Jun 1, 2026
CVE-2026-42588 Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ… Not rated Jun 1, 2026
CVE-2026-45505 Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ… Not rated Jun 1, 2026
CVE-2026-46605 Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections… Not rated Jun 1, 2026
CVE-2026-49157 Incorrect Default Permissions vulnerability in Apache ActiveMQ Not rated Jun 1, 2026
CVE-2026-49270 Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache… Not rated Jun 1, 2026
CVE-2026-41044 Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ,… Not rated Apr 24, 2026
CVE-2026-41043 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache… Not rated Apr 24, 2026

Other Apache Software Foundation products