Security Bulletin: Due to the use of Apache ActiveMQ All, IBM Sterling Control Center is vulnerable to Improper Authorization and Improper Input Validation (CVE-2026-59878, CVE-2026-61487)

Summary Apache ActiveMQ All is used by IBM Sterling Control Center as part of dependency in activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-59878 DESCRIPTION: Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=5.0.0, <=5.19.10)

org.apache.activemq:activemq-all MAVEN version =5.0.0, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.3.1) +5 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=6.0.0, <=6.3.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2026-74761 Source advisory: MEND:CVE-2026-74761...

ROOT-APP-MAVEN-CVE-2026-40466 CVE-2026-40466 in org.apache.activemq:activemq-broker - Patched by Root

Root has patched CVE-2026-40466 in the org.apache.activemq:activemq-broker package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all-5.19.0.jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilitiesCVE-2026-49432, CVE-2026-49434, CVE-2026-50734, CVE-2026-53916, CVE-2026-53917, CVE-2026-54475 reported for activemq-all-5.19.0.jar. Vulnerability Details CVEID:CVE-2026-49432 DESCRIPTION: Improper Input Validation...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19351877...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=5.0.0, <=5.19.8)

org.apache.activemq:activemq-all MAVEN version =5.0.0, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-61487 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-61487 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19352103...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: MEND:CVE-2026-59878...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=4.1.2, <=5.19.8)

org.apache.activemq:activemq-all MAVEN version =4.1.2, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-61487 via org.apache.activemq:activemq-all (>=4.1.2, <=5.19.8)

org.apache.activemq:activemq-all MAVEN version =4.1.2, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-42253, CVE-2026-42588, CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270 reported for activemq-all-5.19.0.jar Vulnerability Details CVEID:CVE-2026-42253 DESCRIPTION: Improper Neutralization of Input...

ROOT-APP-MAVEN-CVE-2026-40046 CVE-2026-40046 in io.root.org.apache.activemq:activemq-all - Patched by Root

Root has patched CVE-2026-40046 in the io.root.org.apache.activemq:activemq-all package for Root:Maven. Multiple fixed versions available...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-49432 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-49432 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17739004...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-49432 via org.apache.activemq:activemq-all (>=5.0.0, <=5.19.7)

org.apache.activemq:activemq-all MAVEN version =5.0.0, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-49434 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-49434 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17739002...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-49434 via org.apache.activemq:activemq-all (>=5.0.0, <=5.19.7)

org.apache.activemq:activemq-all MAVEN version =5.0.0, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

Memory Allocation with Excessive Size Value

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the WireFormatInfo negotiation process. An attacker can cause the broker to allocate excessive memo...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.6) +5 more potentially affected by CVE-2026-50734 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.6)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.6 Source cves: CVE-2026-50734 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-17738999...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-53917 via org.apache.activemq:activemq-all (>=5.0.0, <=5.19.7)

org.apache.activemq:activemq-all MAVEN version =5.0.0, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...