Lucene search
+L

7 matches found

OSV
OSV
•added 2026/03/04 9:31 a.m.•17 views

GHSA-FW88-PF9M-P947 Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

9.8CVSS5.9AI score0.01179EPSS
SaveExploits1References6
NVD
NVD
•added 2026/03/04 9:15 a.m.•29 views

CVE-2026-27446

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

9.8CVSS0.01179EPSS
SaveExploits1References16
attackerkb
attackerkb
•added 2026/03/04 8:48 a.m.•11 views

CVE-2026-27446

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

9.8CVSS5.9AI score0.01179EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2026/03/04 8:48 a.m.•68 views

CVE-2026-27446 Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation

Missing Authentication for Critical Function CWE-306 vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This cou...

9.3CVSS0.01179EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/04 8:35 a.m.•13 views

CVE-2026-27446

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...

9.8CVSS5.8AI score0.01179EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2004-1750

Malware in sbrugna...

5CVSS6.4AI score0.01241EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2004-1749

Malware in sbrugna...

7.5CVSS6.4AI score0.01473EPSS
SaveExploits0References6
Rows per page
Query Builder