CVE-2026-49157

Apache ActiveMQ contains an Incorrect Default Permissions vulnerability (CWE-276) affecting versions before 5.19.7 and from 6.0.0 before 6.2.6 . The root cause is that default Jolokia authorization settings grant non-admin (low-privilege) web-login accounts access to Jolokia operations. This allo...