apache-activemq-rce-research

Apache ActiveMQ Classic — RCE Research Private research archive for the Apache ActiveMQ Classic Jolokia → addNetworkConnector → xbean/Spring-XML remote-code-execution chain CVE-2026-34197 and its patch-bypass CVE-2026-42588, plus a full auto-research audit of the fixed 6.2.6 release and a...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution RCE CVE-2026-34197 is a high severity Remote Code Execution RCE vulnerability affecting Apache ActiveMQ Classic. The issue exists within the Jolokia JMX-HTTP bridge, which exposes management operations over HTTP through the...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

Project-Vuln-Detection-N-Mitigation_101

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ Deserialization RCE CVE-2023-46604 – Phase 2 Project Security Architectures & Systems Administration Author: Vaishnavu C V · Date: 17 Sep 2025 Status: ⌀ Phase 2 deliverables complete Overview This repository documents a hands‑on security desi...

CVE-2026-34197-Lab

CVE-2026-34197 — Apache ActiveMQ Classic Jolokia RCE Lab Overview This repository is a local Docker lab for studying CVE-2026-34197 , an Apache ActiveMQ Classic remote code execution issue reachable through the Jolokia JMX-HTTP API. The lab compares two ActiveMQ Classic instances side by side:...

CVE-2026-41044

CVE-2026-41044 Note: Educational Purposes Only From Advisory to RCA in an Afternoon: How AI Collapses N-Day Analysis A short, honest walkthrough of CVE-2026-41044 in Apache ActiveMQ using the exact pre and post patch code. CVE-2026-41044 was disclosed on April 24, 2026. It's a remote code executi...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Security Detection Tool This is an Apache ActiveMQ Classic exposure detection tool for defense and internal network reconnaissance, used to assist in assessing risks related to CVE-2026-34197. This project does not contain exploit code, does not execute Jolokia exe...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

CVE-2026-54475 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover

Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to the connection that created them. The isolation can be broken as this is only checked in the client, allowing...

PT-2026-34867

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.6 Apache ActiveMQ versions 6.0.0 through 6.2.4 Apache ActiveMQ Broker versions prior to 5.19.6 Apache ActiveMQ Broker versions 6.0.0 through 6.2.4 Apache ActiveMQ All versions prior to 5.19.6 Apache...