GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-camel-karavan-devmode, apache-activemq-fips, camunda, camunda-zeebe, zipkin, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq, jenkins...

CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq...

CVE-2026-41841 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq...

CVE-2026-41842 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq...

GHSA-MQ64-J8F9-9GCJ vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq...

GHSA-X23C-287F-QQV5 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq...

CVE-2026-41844 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui, kafbat-ui-fips, apache-nifi-registry, apache-activemq...

CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

DEBIAN-CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

UBUNTU-CVE-2026-61487

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

UBUNTU-CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

ROS-20260728-73-0010

The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...

PT-2026-65463

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ AMQP versions prior to 5.19.9 Apache ActiveMQ AMQP versions 6.0.0 through 6.2.7 Apache ActiveMQ versions prior to 5.19.9 Apache ActiveMQ versions 6.0.0 through 6.2.7 Apache ActiveMQ All versions prior to 5.19.9 Apache ActiveMQ...

ROS-20260727-73-0012

A vulnerability in the message broker administration console of the Apache ActiveMQ software platform is related to flaws in the code generation control mechanism. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260727-73-0011

A vulnerability in apache-activemq related to uncontrolled resource consumption. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0013

A vulnerability in apache-activemq related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

Exploit for OS Command Injection in Apache Activemq

CVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution...

ROS-20260714-73-0047

The vulnerability in Apache ActiveMQ is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

RCE (Remote Code Execution) at Apache ActiveMQ dependency in Bamboo Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...