CVE-2026-42588

Apache ActiveMQ is vulnerable to Remote Code Execution (RCE) due to improper input validation in the Jolokia JMX-HTTP bridge exposed at /api/jolokia/. The default access policy allows authenticated users to perform exec operations on MBeans, specifically BrokerService.addNetworkConnector(String)....