Non notée
CVE-2026-49362 An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized…
Description
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Artemis 2.50 | 2.50.0 → 2.56.0 | Pas de correctif indiqué |
| Apache ActiveMQ Artemis 1.0 | 1.0.0 → 2.44.0 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Artemis
Les 9 CVE de Apache Artemis →
CVE-2026-49363
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a…
Non notée
CVE-2026-49364
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during…
Non notée
CVE-2026-57822
When the broker is processing message-based management requests, sent by an authenticated messaging client that is…
Non notée
CVE-2026-57967
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and…
Non notée