| CVE-2026-49362 |
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-49363 |
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-49364 |
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-57822 |
When the broker is processing message-based management requests, sent by an authenticated messaging client that is…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-57967 |
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-67593 |
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-75880 |
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in…
|
Not rated
|
Sep 10, 2026 |
| CVE-2026-32642 |
Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application…
|
2.3
Low
|
Mar 24, 2026 |
| CVE-2026-27446 |
Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis
|
9.3
Critical
|
Mar 4, 2026 |