CVE-2026-41844 vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq, kafbat-ui, camunda-zeebe, apache-activemq-fips, kafbat-ui-fips, apache-nifi-registry...

CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq, kafbat-ui, camunda-zeebe, apache-activemq-fips, kafbat-ui-fips, apache-nifi-registry...

CVE-2026-41842 vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq, kafbat-ui, camunda-zeebe, apache-activemq-fips, kafbat-ui-fips, apache-nifi-registry...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq, kafbat-ui, camunda-zeebe, apache-activemq-fips, kafbat-ui-fips, apache-nifi-registry...

GHSA-3CHG-M5W7-QFV5 vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq, camunda-zeebe, apache-activemq-fips, apache-nifi-registry...

CVE-2026-41841 vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq, kafbat-ui, camunda-zeebe, apache-activemq-fips, kafbat-ui-fips, apache-nifi-registry...

CLEANSTART-2026-AA33839 Security fixes in activemq 6.2.3-r1

Package activemq version 6.2.3-r1 fixes 10 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-22745, CVE-2026-22741...

Apache ActiveMQ < 5.19.9 / 6.x < 6.2.8 Multiple Vulnerabilities

The version of Apache ActiveMQ running on the remote host is prior to 5.19.9 or 6.x prior to 6.2.8. It is, therefore, affected by multiple vulnerabilities: - Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that c...

DEBIAN-CVE-2026-61487

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-61487

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

DEBIAN-CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-61487

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

UBUNTU-CVE-2026-61487

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

UBUNTU-CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-59878 Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-59878

CVE-2026-59878 : Apache ActiveMQ AMQP/NIO frame size validation issue leading to DoS. A remote unauthenticated attacker can send a crafted frame size to exhaust NIO threads and deny service. Affected versions: ActiveMQ AMQP before 5.19.9 (and 6.0.0 before 6.2.8); ActiveMQ before 5.19.9 (and 6.0.0...

CVE-2026-59878 Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-61487 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

EUVD-2026-49847

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...