The vulnerability of Apache ActiveMQ software-related to integer overflow allows attackers to cause service failures.

🗓️ 19 Aug 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Integer overflow in Apache ActiveMQ allows attackers to cause service failures.

Reporter	Title	Published	Views	Family All 50
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	23 Jul 202618:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in activemq-all (CVE-2025-66168)	4 May 202616:07	–	ibm
Tenable Nessus	Apache ActiveMQ < 5.19.2 / 6.0.x < 6.1.9 / 6.2.0 MQTT Control Packet Validation Vulnerability (CVE-2025-66168)	5 Mar 202600:00	–	nessus
Tenable Nessus	IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 < 9.7.2.11 Multiple Vulnerabilities (7279145)	7 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-66168	6 Mar 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-40046	13 Apr 202600:00	–	nessus
ATTACKERKB	CVE-2025-66168	4 Mar 202608:45	–	attackerkb
ATTACKERKB	CVE-2026-40046	9 Apr 202615:58	–	attackerkb
Chainguard	CVE-2025-66168 vulnerabilities	18 Mar 202619:17	–	cgr
Circl	CVE-2025-66168	3 Mar 202618:20	–	circl

Vulners

Node

OR

apache apache_activemqRange<5.19.2

apache apache_activemqRange6.2.0–6.2.1

apache apache_activemqRange6.0.0–6.1.9

apache apache_activemq_allRange<5.19.2

apache apache_activemq_allRange6.2.0–6.2.1

apache apache_activemq_allRange6.0.0–6.1.9

apache apache_activemq_mqttRange<5.19.2

apache apache_activemq_mqttRange6.2.0–6.2.1

apache apache_activemq_mqttRange6.0.0–6.1.9

Source	Link
openwall	www.openwall.com/lists/oss-security/2026/03/03/5
activemq	www.activemq.apache.org/security-advisories.data/CVE-2026-40046-announcement.txt
github	www.github.com/advisories/GHSA-c825-6ph3-4h84
github	www.github.com/apache/activemq
lists	www.lists.apache.org/thread/13n8mkrb2jf2y6yyhpgrkmpqcm7djyto
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-66168
redos	www.redos.red-soft.ru/support/secure/
cve	www.cve.org/CVERecord
web	www.web.nvd.nist.gov/view/vuln/detail

19 Aug 2026 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 38.8

CVSS 29

EPSS0.0078

Apache ActiveMQ integer overflow DoS service failure