Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability

🗓️ 30 Jun 2026 12:31:52Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 7 Views

Authenticated user can cause DoS in Apache ActiveMQ via large OpenWire message size.

Reporter	Title	Published	Views	Family All 96
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DevOps Build.	30 Sep 202618:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to denial of service attack CVE-2026-53917	28 Oct 202615:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all-5.19.0.jar	7 Aug 202605:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	17 Sep 202608:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is affected by multiple vulnerabilities in Apache ActiveMQ	31 Jul 202612:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to denial of service attack CVE-2026-50734	28 Oct 202615:32	–	ibm
Tenable Nessus	Apache ActiveMQ < 5.19.8 / 6.x < 6.2.7 Multiple Vulnerabilities	3 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-53917	1 Jul 202600:00	–	nessus
attackerkb	CVE-2026-53917	30 Jun 202609:49	–	attackerkb
Chainguard	CVE-2026-53917 vulnerabilities	5 Nov 202622:54	–	cgr

Vulners

Node

OR

org.apache.activemq activemq-brokerRange6.0.0–6.2.7maven

org.apache.activemq activemq-brokerRange<5.19.8maven

org.apache.activemq activemq-clientRange6.0.0–6.2.7maven

org.apache.activemq activemq-clientRange<5.19.8maven

org.apache.activemq activemq-allRange6.0.0–6.2.7maven

org.apache.activemq activemq-allRange<5.19.8maven

org.apache.activemq apache-activemqRange6.0.0–6.2.7maven

org.apache.activemq apache-activemqRange<5.19.8maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-53917
lists	www.lists.apache.org/thread/grrd1mwgkgblqjbwkkq6dvmdxd9ov2dx
openwall	www.openwall.com/lists/oss-security/2026/06/29/14
github	www.github.com/apache/activemq/pull/2136
github	www.github.com/apache/activemq/commit/78bb8dcdc32e80c8b8813b57f89147572d16a2b9
github	www.github.com/apache/activemq/commit/b20e61c7ef736a04ad07a934ea8de628550c6cf2
github	www.github.com/apache/activemq/commit/ecfd1336fa3f3f6116a78f0ab71d1b2f90bc717f
github	www.github.com/apache/activemq/releases/tag/activemq-5.19.8
github	www.github.com/apache/activemq/releases/tag/activemq-6.2.7
github	www.github.com/advisories/GHSA-f77w-px59-cqf5

04 Nov 2026 16:10Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.0074

SSVC

Apache ActiveMQ Apache ActiveMQ Client Apache ActiveMQ Broker DoS OpenWire Message OOM