CVE-2026-27446

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

CVE-2026-27446

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

CVE-2026-27446 Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

PT-2026-22892

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.51.0 Apache ActiveMQ Artemis versions 2.11.0 through 2.44.0 Description A missing authentication check for a critical function exists in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated...

CVE-2026-27446: Missing Authentication for Critical Function

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

Apache ActiveMQ Artemis and Apache Artemis security vulnerabilities

Apache ActiveMQ Artemis and Apache Artemis are both products of the Apache Foundation in the United States. Apache ActiveMQ Artemis is a high-performance open-source message broker. Apache Artemis is a message broker software. Versions 2.50.0 to 2.51.0 of Apache Artemis, as well as versions 2.11....

org.apache.activemq:apache-artemis (1.0.0), org.apache.activemq:artemis-web (1.0.0) potentially affected by CVE-2023-50780 via org.apache.activemq:artemis-cli (1.0.0)

org.apache.activemq:artemis-cli MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-cli and may be impacted: - org.apache.activemq:apache-artemis 1.0.0 - org.apache.activemq:artemis-web 1.0.0 Source cves:...

artemis-commons: Apache ActiveMQ Artemis DoS

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability DoS through uncontrolled resource consumption of memory...

Improper Authentication in Apache ActiveMQ and Apache Artemis

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error...

org.apache.activemq:apache-artemis (1.0.0) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.0.0)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.0.0 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.1.0) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.1.0)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.1.0 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.4.0) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.4.0)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.4.0 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.5.1) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.5.1)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.5.1 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.5.4) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.5.4)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.5.4 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.5.6) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.5.6)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.5.6 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.3.0) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.3.0)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.3.0 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.5.0) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.5.0)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.5.0 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.5.2) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.5.2)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.5.2 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.5.3) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.5.3)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.5.3 Source cves: CVE-2021-26118...

org.apache.activemq:apache-artemis (1.5.5) potentially affected by CVE-2021-26118 via org.apache.activemq:artemis-openwire-protocol (1.5.5)

org.apache.activemq:artemis-openwire-protocol MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:artemis-openwire-protocol and may be impacted: - org.apache.activemq:apache-artemis 1.5.5 Source cves: CVE-2021-26118...