CVE-2026-40046

An integer overflow or wraparound vulnerability (CWE-190) exists in Apache ActiveMQ , Apache ActiveMQ All , and Apache ActiveMQ MQTT due to improper validation of the remaining length field in MQTT control packets. This occurs because the software fails to restrict the field to the MQTT v3.1.1 sp...