Linux Distros Unpatched Vulnerability : CVE-2026-41043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can...

Apache多款产品 输入验证错误漏洞

Apache ActiveMQ, among others, is a product of the Apache Foundation in the United States. Apache ActiveMQ is an open-source messaging middleware. Apache ActiveMQ Broker is a enterprise-level messaging proxy middleware that supports multiple protocols. Apache ActiveMQ All is a complete messaging...

Apache多款产品 输入验证错误漏洞

Apache ActiveMQ, among others, is a product of the Apache Foundation in the United States. Apache ActiveMQ is an open-source messaging middleware. Apache ActiveMQ Broker is a enterprise-level messaging proxy middleware that supports multiple protocols. Apache ActiveMQ All is a complete messaging...

PT-2026-34867

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.6 Apache ActiveMQ versions 6.0.0 through 6.2.4 Apache ActiveMQ Broker versions prior to 5.19.6 Apache ActiveMQ Broker versions 6.0.0 through 6.2.4 Apache ActiveMQ All versions prior to 5.19.6 Apache...

April Linux Patch Wednesday

April Linux Patch Wednesday. In April, Linux vendors addressed 1,035 vulnerabilities - nearly twice as many as in March. One might assume that most of these would again be Linux Kernel vulnerabilities, but that's not the case! Linux Kernel vulnerabilities were relatively few - just 209. The...

CVE-2026-39304 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

GHSA-H2H4-5M64-M273 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

CVE-2026-33227 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

GHSA-5568-6QCG-G7FX vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

GHSA-RXPJ-7QVF-XV32 vulnerabilities

Vulnerabilities for packages: apache-activemq, geoserver, apache-activemq-fips...

CVE-2026-34197 vulnerabilities

Vulnerabilities for packages: apache-activemq, geoserver, apache-activemq-fips...

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency CISA. To that end, the agency has added the vulnerability, tracked as CVE-2026-34197 CVSS score: 8.8, to its...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-34197link is external Apache ActiveMQ Improper Input Validation Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber acto...

Apache ActiveMQ Improper Input Validation Vulnerability

Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection...

VulnCheck KEV: CVE-2026-34197

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...

CVE-2026-34480 vulnerabilities

Vulnerabilities for packages: infinispan, lmcache-cuda-12.8, neo4j, apache-activemq-artemis, geoserver, opensearch-fips, camunda-zeebe, apache-camel-karavan-devmode, apache-pulsar-fips, kafka-fips, flink, spark-kubernetes-operator-fips, akhq, ghidra, wso2is, apache-activemq-fips, spark-fips, solr...

GHSA-3PXV-7CMR-FJR4 vulnerabilities

Vulnerabilities for packages: infinispan, lmcache-cuda-12.8, neo4j, apache-activemq-artemis, geoserver, opensearch-fips, camunda-zeebe, apache-camel-karavan-devmode, apache-pulsar-fips, kafka-fips, flink, spark-kubernetes-operator-fips, akhq, ghidra, wso2is, apache-activemq-fips, spark-fips, solr...

CVE-2026-39304

A flaw was found in Apache ActiveMQ Client, Apache ActiveMQ Broker, and Apache ActiveMQ. A remote attacker can exploit this vulnerability by rapidly triggering Transport Layer Security TLS version 1.3 handshake KeyUpdates. This improper handling of KeyUpdates causes the broker to exhaust its memo...

The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker allows a perpetrator to execute arbitrary code.

The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for "CVE-2025-66168: MQTT control packet remaining length field is not properly validated" was only applied to 5.19.2 and future 5.19.x releases but was missed for all 6.0.0+...