DeutschShown in its original language — a full translation is planned for a future version.
Apache ActiveMQ: Mehrere Schwachstellen
view advisory published 2026-06-29
Ein Angreifer kann mehrere Schwachstellen in Apache ActiveMQ ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-54475US | —OT elevated | — | ||
Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.
Apache ActiveMQ Classic temporary destinations are expected to be isolated to… | ||||
| CVE-2026-53917US | — | — | ||
Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker.
An authenticated user can cause… | ||||
| CVE-2026-53916US | — | — | ||
Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp.
An unauthenticated client that opens a STOMP NIO connect… | ||||
| CVE-2026-50750US | — | — | ||
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.
Following the fix for CVE-2026-49270 an unauthenticated attacke… | ||||
| CVE-2026-50734US | — | — | ||
Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All.
An unauthenticated network attacker can cause a broker D… | ||||
| CVE-2026-49877US | — | — | ||
Improper Authorization vulnerability in Apache ActiveMQ.
An authenticated low-privilege Web Console user by default can access /admin/* paths in the Web Console. The default Jetty… | ||||
| CVE-2026-49434US | — | — | ||
Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.
An attacker that has access to publish or modify entries in LDAP that matc… | ||||
| CVE-2026-49432US | — | — | ||
Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp.
A remote unauthenticated peer that can reach an exposed STOMP connector can… | ||||
| CVE-2026-50760US | — | — | ||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:66488 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66545 vom 2026-09-11external
- Red Hat Security Advisory RHSA-2026:69459 vom 2026-09-21external
- Apache Announcement vom 2026-06-29external
- Apache Announcement vom 2026-06-29external
- Apache Announcement vom 2026-06-29external
- Apache Announcement vom 2026-06-29external
- Apache Announcement vom 2026-06-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan