apache-activemq-rce-research

Apache ActiveMQ Classic — RCE-исследование Личный исследовательский архив по цепочке удаленного выполнения кода RCE в Apache ActiveMQ Classic через Jolokia → addNetworkConnector → xbean/Spring-XML CVE-2026-34197 и обход патча CVE-2026-42588, а также полный аудит с автоисследованием исправленного...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic 실습 환경 이 저장소는 Apache ActiveMQ Classic의 CVE-2026-34197 을 연구하고 취약한 인스턴스를 패치된 빌드와 비교하기 위한 로컬 실습 환경을 포함합니다. 이 저장소는 두 가지 목표를 지원하도록 구성되어 있습니다: 문제를 엄격히 통제되고 격리된 환경에서 재현합니다. 패치된 ActiveMQ Classic 빌드에서 수정 동작을 검증합니다. 면책 조항 이 저장소는 귀하가 소유하거나 명시적으로 테스트가 허가된 격리된 실습 환경에서 엄격히 합법적이고...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Инструмент проверки безопасности Это инструмент для обнаружения поверхности атаки Apache ActiveMQ Classic, предназначенный для защиты и внутреннего аудита, помогающий оценить риски, связанные с CVE-2026-34197. Данный проект не содержит эксплойтов, не выполняет...

ROOT-OS-DEBIAN-12-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34197 CVE-2026-34197 in org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-34197 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

HPESBNW05073 rev.1 - HPE Telco Unified Correlation and Automation (UCA), Multiple Vulnerabilities

Potential Security Impact: Local: Input Validation; Remote: Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Correlation Analyzer UCA Older than 4.4.10 - Fixed in version UCA 4.4.10 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

Exploit for Improper Input Validation in Apache Activemq

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overvi...

Weekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer Enum

When Open Source is a bit too Open Several fun modules landed this week, including an Apache RCE, Windows Kernel pointer collection, and Gogs RCE via naming. Leading off is Gogs' RCE that allows an attacker to execute commands by naming their branch --exec and requesting a rebase. Another useful...

Exploit for Improper Input Validation in Apache Activemq

CVE-2026-34197 ActiveMQ Classic Security Detection Tool This...

VulnCheck KEV: CVE-2026-40466

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated attacker may bypass the fix in CVE-2026-34197 by adding a connector using an HTTP Discovery transport...

Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in activemq-all (CVE-2026-34197)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-34197 reported for activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-34197 DESCRIPTION: Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broke...

CVE-2026-40466 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated attacker may bypass the fix in CVE-2026-34197 by adding a connector using an HTTP Discovery transport...

CVE-2026-34197 vulnerabilities

Vulnerabilities for packages: apache-activemq, geoserver, apache-activemq-fips...

Exploit for CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API...

Apache ActiveMQ < 5.19.4 / 6.x < 6.2.3 Improper Input Validation Code Injection

The version of Apache ActiveMQ running on the remote host is prior to 5.19.4 or 6.x prior to 6.2.3. It is, therefore, affected by an improper input validation and code injection vulnerability: - ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ with a default access policy tha...

Exploit for CVE-2026-34197

Fixed the issue...

Exploit for CVE-2026-34197

CVE-2026-34197 CVE-2026-34197 activemq PoC PoC for the Activ...

Arbitrary Code Injection

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Arbitrary Code Injection over the /api/jolokia MBeans interface. A user can execute arbitrary code on the broker's JVM by invoking operations with ...

CVE-2026-34197 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...

CVE-2026-34197

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...