DeutschShown in its original language — a full translation is planned for a future version.
Apache ActiveMQ: Mehrere Schwachstellen
view advisory published 2026-04-09
Ein Angreifer kann mehrere Schwachstellen in Apache ActiveMQ ausnutzen, um einen Denial of Service Angriff durchzuführen oder um nicht näher spezifizierte Auswirkungen zu verursachen
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-39304US | — | — | ||
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.
ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 h… | ||||
| CVE-2026-40046US | — | — | ||
Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT.
The fix for "CVE-2025-66168: MQTT control packet remaining length field… | ||||
02
references
External citations — patches, advisories, analysis.
- Apple Security Advisory vom 2026-04-09external
- ActiveMQ 5.19.5 Release vom 2026-04-09external
- ActiveMQ 6.2.4 Release vom 2026-04-09external
- Apache CVE-2026-39304 announcement vom 2026-04-09external
- Apache CVE-2026-40046 announcement vom 2026-04-09external
- WID-SEC-W-2026-1040 - CSAF Versionself
- WID-SEC-2026-1040 - Portal Versionself
- IBM Security Bulletin 7280950 vom 2026-07-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan