CVE-2026-108946

Apache ActiveMQ and Apache ActiveMQ KahaDB are vulnerable to an improper input validation issue where the broker resolves connection, session, and consumer states from user-provided IDs without verifying they are bound to the requesting user. This allows an authenticated client to spoof another u...