GHSA-957G-F97V-VPPC vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, camunda-zeebe, apache-nifi-registry, camunda...

CVE-2026-41846 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, camunda-zeebe, apache-nifi-registry, camunda...

GHSA-CJPG-RGQ5-FR37 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

CVE-2026-41842 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

CVE-2026-41844 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-camel-karavan-devmode, apache-activemq, jenkins, kafbat-ui, camunda-zeebe, zipkin, apache-nifi-registry, kafbat-ui-fips, camunda, keycloak-config-cli...

CVE-2026-41841 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

GHSA-MQ64-J8F9-9GCJ vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

GHSA-X23C-287F-QQV5 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, apache-activemq, kafbat-ui, camunda-zeebe, apache-nifi-registry, kafbat-ui-fips, camunda...

Security Bulletin: IBM Jazz for Service Management is affected by multiple vulnerabilities in Apache ActiveMQ

Summary IBM Jazz for Service Management is affected by multiple vulnerabilities in Apache ActiveMQ CVE-2026-49432,CVE-2026-49434,CVE-2026-50734,CVE-2026-53916,CVE-2026-53917,CVE-2026-54475 Vulnerability Details CVEID:CVE-2026-49432 DESCRIPTION: Improper Input Validation vulnerability in Apache...

Improper Validation of Specified Quantity in Input

Overview org.apache.activemq:apache-activemq is a Message Broker and Client implementations. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in AmqpFrameParser and AmqpWireFormat in the AMQP NIO transport. An attacker can cause a denial of...

Improper Validation of Specified Quantity in Input

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in AmqpFrameParser and AmqpWireFormat in the AMQP NIO transport. An attacker can cause a denial ...

Improper Authorization

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Improper Authorization in AuthorizationBroker through the temporary-destination write ACL check in AuthorizationBroker.java. An authenticated...

CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

DEBIAN-CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

UBUNTU-CVE-2026-61487

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

UBUNTU-CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

ROS-20260728-73-0010

The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...