90 matches found
CVE-2026-49363
A missing authentication vulnerability was found in Apache ActiveMQ Artemis. The SUBSCRIBETOPOLOGYV2 handler in CoreProtocolManager.LocalChannelHandler.handlePacket processes topology subscription requests on channel0 with zero authentication -- no call to getSecurityStore, no credential...
CVE-2026-49362
Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state...
CVE-2023-50780
CVE-2023-50780: Jolokia API를 통해 Apache ActiveMQ Artemis에서 접근 가능한 위험한 MBeans http://127.0.0.1:8161/console/jolokia에서 Jolokia API가 노출하는 MBeans를 나열하고 검사함으로써 다음과 같은 공격 벡터가 식별되었습니다: Log4J를 사용한 임의 파일 쓰기로 간접적인 원격 코드 실행RCE 초래 Log4J를 사용한 임의 파일 읽기 Artemis Broker MBeans를 사용한 DoS 이 취약점은 Artemis 웹 인터페이스에서 사용되...
CLEANSTART-2026-DV18988 Security fixes in apache-activemq-artemis 2.56.0-r1
Package apache-activemq-artemis version 2.56.0-r1 fixes 15 vulnerabilities: CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-41417...
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...
CVE-2026-39304 vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
GHSA-H2H4-5M64-M273 vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
GHSA-5568-6QCG-G7FX vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
CVE-2026-33227 vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis...
Linux Distros Unpatched Vulnerability : CVE-2026-27446
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Co...
GHSA-FW88-PF9M-P947 Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions
Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...
CVE-2026-27446 Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation
Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...
EUVD-2021-1379
Malware in sbrugna...
EUVD-2025-9321
Malicious code in bioql PyPI...
EUVD-2022-1134
Malicious code in bioql PyPI...
EUVD-2022-0791
Malicious code in bioql PyPI...
EUVD-2022-6543
Malicious code in bioql PyPI...
EUVD-2025-10665
Malicious code in bioql PyPI...