WID-SEC-W-2026-2530

DeutschShown in its original language — a full translation is planned for a future version.

Apache ActiveMQ: Mehrere Schwachstellen

view advisory published 2026-07-27

Ein Angreifer kann mehrere Schwachstellen in Apache ActiveMQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-61487US	—	0.46% (39th)	—	2026-07-28
Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL b…
CVE-2026-59878US	—	0.78% (56th)	—	2026-07-28
Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector c…

references

External citations — patches, advisories, analysis.

Apache Security Advisory vom 2026-07-27external
Apache Security Advisory vom 2026-07-27external
OSS Security Mailing List vom 2026-07-27external
OSS Security Mailing List vom 2026-07-27external
WID-SEC-W-2026-2530 - CSAF Versionself
WID-SEC-2026-2530 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan