CVE-2026-49270

Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Brokers that are configured with a network connector with syncDurableSubs set to true, are vulnerable to an unauthenticated attacker who can receive a list of all...

CVE-2026-49270

Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Brokers that are configured with a network connector with syncDurableSubs set to true, are vulnerable to an unauthenticated attacker who can receive a list of all...

CVE-2026-49270

Apache ActiveMQ (Broker, Apache ActiveMQ, and Apache ActiveMQ All) is vulnerable to an Exposure of Sensitive Information Through Metadata due to insufficient access control. When a network connector is configured with syncDurableSubs set to true , an unauthenticated attacker can send a BrokerInfo...