Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.13.5 release and security update

🗓️ 06 May 2026 17:58:57Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 21 Views

Red Hat AMQ Broker 7.13.5 security update fixes multiple CVEs and improves stability.

Reporter	Title	Published	Views	Family All 1056
vulnersOsv	ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0 <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (=0.1.0) +16281 more potentially affected by CVE-2026-0636 via org.bouncycastle:bcprov-jdk18on (>=1.74 <=1.83)	17 Apr 202618:31	–	vulnersosv
vulnersOsv	ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +1747 more potentially affected by CVE-2026-33871 via io.netty:netty-codec-http2 (>=4.2.0.Alpha1 <=4.2.10.Final)	26 Mar 202618:49	–	vulnersosv
vulnersOsv	ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +19755 more potentially affected by CVE-2026-33871 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.131.Final)	26 Mar 202618:49	–	vulnersosv
vulnersOsv	io.github.jinahya:jinahya-bcprov (=0.0.1), org.apache.camel.karaf:camel-as2 (>=4.7.0 <=4.10.7) +14 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71 <=1.83)	15 Apr 202610:16	–	vulnersosv
vulnersOsv	org.bouncycastle:bcjmail-debug-jdk18on (>=1.82 <=1.83), org.bouncycastle:bcmail-debug-jdk18on (>=1.82 <=1.83) +5 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk18on (>=1.82 <=1.83)	17 Apr 202618:31	–	vulnersosv
vulnersOsv	app.cash.bittycity:outie (=0.0.1), app.cash.bittycity:outie-jooq-provider (=0.0.1) +1229 more potentially affected by CVE-2026-0636 via org.bouncycastle:bcprov-jdk15to18 (>=1.74 <=1.83)	15 Apr 202610:16	–	vulnersosv
vulnersOsv	ai.platon.gora:gora-core (=1.0.0), ai.platon.gora:gora-mongodb (=1.0.0) +1308 more potentially affected by CVE-2026-24308 via org.apache.zookeeper:zookeeper (>=3.9.0 <=3.9.4)	7 Mar 202609:30	–	vulnersosv
vulnersOsv	aero.m-click:mcpdf (>=0.2.3 <=0.2.10), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.6.0.0) +20663 more potentially affected by CVE-2026-5588 via org.bouncycastle:bcpkix-jdk15on (>=1.49 <=1.70)	15 Apr 202618:31	–	vulnersosv
vulnersOsv	io.github.qsy7.java.examples:ssh (=0.3.3), io.github.qsy7.java.modules.linux-builder.modules.cli.providers:cdi (=0.1.2) +9 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-ext-jdk14 (>=1.69 <=1.72)	17 Apr 202618:31	–	vulnersosv
vulnersOsv	org.bouncycastle:bcmail-debug-jdk14 (>=1.81 <=1.83), org.bouncycastle:bcpg-debug-jdk14 (>=1.81 <=1.83) +3 more potentially affected by CVE-2026-0636 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81 <=1.83)	15 Apr 202610:16	–	vulnersosv

Source	Link
access	www.access.redhat.com/jbossnetwork/restricted/listSoftware.html
access	www.access.redhat.com/security/updates/classification
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

08 Aug 2026 16:33Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5 - 9.1

CVSS 49.3

EPSS0.01213

SSVC

AMQ Broker CVE-2025-14813 CVE-2026-0636 CVE-2026-24281 CVE-2026-24308 CVE-2026-33870 CVE-2026-33871 CVE-2026-5588