apache-activemq-rce-research

Apache ActiveMQ Classic — RCE Research Private research archive for the Apache ActiveMQ Classic Jolokia → addNetworkConnector → xbean/Spring-XML remote-code-execution chain CVE-2026-34197 and its patch-bypass CVE-2026-42588, plus a full auto-research audit of the fixed 6.2.6 release and a...

CVE-2026-34197-payload-Apache-ActiveMQ-

ActiveMQ Jolokia RCE Vulnerability Reproduction Guide This repository provides a remote code execution RCE vulnerability reproduction environment and exploitation script based on the exposed Jolokia API endpoint /api/jolokia/ of Apache ActiveMQ. By invoking the addNetworkConnector operation, it...

CVE-2026-34197

CVE-2026-34197 CVE-2026-34197 activemq PoC PoC for the ActiveMQ as per Horizon3 post https://horizon3.ai/attack-research/disclosures/cve-2026-34197-activemq-rce-jolokia/ krasn@icestorm cve-2026-34197-activemq % docker compose up -d krasn@icestorm cve-2026-34197-activemq % python3 exploitpoc.py au...

CVE-2026-34197-PoC

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector RCE Proof-of-concept and technical notes for CVE-2026-34197 , a remote code execution vulnerability in Apache ActiveMQ Classic reachable through the Jolokia JMX-HTTP bridge. Affected: ActiveMQ Classic ⚠️ For authorized testing / research...

Exploit for Code Injection in Apache Activemq

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector...

Apache ActiveMQ CVE-2026-34197 detection

Fingerprints Apache ActiveMQ Classic and flags versions affected by CVE-2026-34197 Jolokia addNetworkConnector RCE: 5.19.4 and 6.0.0 through 6.2.2. !/usr/bin/env python3 -- coding: utf-8 -- import re from typing import Optional, Tuple from kittysploit import from lib.protocols.http.httpclient...

Exploit for Improper Input Validation in Apache Activemq

Apache ActiveMQ Classic — RCE Research Private research archi...

Improper Input Validation

Overview org.apache.activemq:activemq-broker is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Affected versions of this package are vulnerable to Improper Input Validation through the addNetworkConnector function exposed via the Jolokia JMX-HTTP bridge. An...