CVE-2026-74761

Improper input validation in TopicRegion allows an authenticated client to spoof clientId when removing a durable topic subscription. This flaw in Apache ActiveMQ , Apache ActiveMQ Broker , and Apache ActiveMQ All (all platforms) can enable the unauthorized removal of other users' durable topic s...

CVE-2026-61487

An Improper Authorization vulnerability (CWE-285) exists in Apache ActiveMQ Broker , Apache ActiveMQ All , and Apache ActiveMQ . An authenticated low-privilege user can bypass per-destination write ACLs by targeting an ActiveMQ temporary composite destination whose physical name is a comma-separa...

CVE-2026-59878

An Improper Input Validation vulnerability exists in Apache ActiveMQ AMQP , Apache ActiveMQ , and Apache ActiveMQ All . A remote unauthenticated peer can trigger a denial-of-service (DoS) by sending a specific frame size value to an exposed AMQP NIO connector . This causes NIO threads to crash, p...