OESA-2026-4048 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable...

OESA-2026-4046 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable...

OESA-2026-4047 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable...

Improper Input Validation

Apache ActiveMQ is vulnerable to improper input validation. The vulnerability is due to insufficient validation of the clientId when removing a durable topic subscription, which allows an authenticated attacker to spoof a client ID and potentially remove another client's durable topic subscriptio...

Apache ActiveMQ < 5.19.11 / 6.x < 6.3.2 clientId Spoofing

The version of Apache ActiveMQ running on the remote host is prior to 5.19.11 or 6.x prior to 6.3.2. It is, therefore, affected by a spoofing vulnerability: - Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An...

CVE-2026-74761

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2;...

EUVD-2026-74829

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2;...

CVE-2026-74761 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2;...

PT-2026-88926

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.11 Apache ActiveMQ versions 6.0.0 through 6.3.1 Apache ActiveMQ Broker versions prior to 5.19.11 Apache ActiveMQ Broker versions 6.0.0 through 6.3.1 Apache ActiveMQ All versions prior to 5.19.11 Apache...

CVE-2026-74761: Improper Input Validation

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2;...

CVE-2026-32642

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An authenticated user can exploit this incorrect authorization vulnerability by attempting to create a non-durable Java Message Service JMS topic subscription on an address that does not exist. If the user has "createDurableQueue"...