EUVD-2026-116827

Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime configuration plugin removes a principal's write grant on a destination, an authenticated connection opened before the change can keep sending to that destination,...

CVE-2026-111822

Apache ActiveMQ and Apache ActiveMQ Runtime Config are vulnerable to improper invalidation of cached authorizations . When the runtime configuration plugin removes a principal's write grant on a destination via a live ACL update, the system fails to invalidate the existing cache. This allows an a...