CVE-2026-42588
🗓️ 01 Jun 2026 07:23:17Reported by apacheType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 287 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 91 |
|---|---|---|---|---|
 | Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar | 27 Jul 202607:41 | – | ibm |
 | Exploit for Improper Input Validation in Apache Activemq | 4 Jul 202606:45 | – | githubexploit |
| Exploit for Improper Input Validation in Apache Activemq | 6 Jun 202605:47 | – | githubexploit |
 | CVE-2026-42588 | 1 Jun 202607:23 | – | attackerkb |
 | June Linux Patch Wednesday | 26 Jun 202617:00 | – | avleonov |
 | RCE (Remote Code Execution) at Apache ActiveMQ dependency in Bamboo Data Center | 11 Jul 202604:29 | – | atlassian |
 | Jolokia web console Code Execution | 19 Jun 202600:00 | – | bdu_fstec |
 | CVE-2026-42588 vulnerabilities | 10 Jul 202620:20 | – | cgr |
 | CVE-2026-42588 | 31 May 202617:43 | – | circl |
 | Apache ActiveMQ security vulnerabilities | 1 Jun 202600:00 | – | cnnvd |
10
Node
OR
[
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-broker",
"product": "Apache ActiveMQ Broker",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:activemq-all",
"product": "Apache ActiveMQ All",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.activemq:apache-activemq",
"product": "Apache ActiveMQ",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "5.19.7",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "6.2.6",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| BrokerService.addNetworkConnector(String) | request body | /api/jolokia/ | Authenticated Jolokia JMX-HTTP bridge allows calling BrokerService.addNetworkConnector(String). A crafted masterslave:// URI with a brokerConfig=xbean: scheme can trigger remote Spring XML loading and RCE. | CWE-94, CWE-20 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
22 Jul 2026 07:10Current
7.9High risk
Vulners AI Score7.9
CVSS 3.18.1
EPSS0.00656
SSVC