CVE-2026-34197

Apache ActiveMQ is vulnerable to Remote Code Execution (RCE) due to improper input validation in the Jolokia JMX-HTTP bridge (at /api/jolokia/). The default access policy permits exec operations on all ActiveMQ MBeans, allowing an authenticated attacker to invoke BrokerService.addNetworkConnector...