DeutschShown in its original language — a full translation is planned for a future version.
Apache ActiveMQ Artemis: Mehrere Schwachstellen
view advisory published 2026-09-09
Ein Angreifer kann mehrere Schwachstellen in Apache ActiveMQ Artemis ausnutzen, um Sicherheitsvorkehrungen zu umgehen, authentifizierte Sitzungen zu kapern, Daten zu manipulieren oder offenzulegen oder Denial-of-Service-Zustände herbeizuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-75880US | — | — | ||
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a… | ||||
| CVE-2026-67593US | —OT elevated | — | ||
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization… | ||||
| CVE-2026-57967US | —OT elevated | Exploit | ||
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated sessi… | ||||
| CVE-2026-57822US | — | — | ||
When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messa… | ||||
| CVE-2026-49364US | —OT elevated | — | ||
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake.
This issue affec… | ||||
| CVE-2026-49363US | —OT elevated | — | ||
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a SUBSCRIBE_TOPOLOGY request prior to authentication.
This issu… | ||||
| CVE-2026-49362US | —OT elevated | — | ||
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service.
Th… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:66488 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66545 vom 2026-09-11external
- Red Hat Security Advisory RHSA-2026:67603 vom 2026-09-15external
- Red Hat Security Advisory RHSA-2026:67604 vom 2026-09-15external
- Red Hat Security Advisory RHSA-2026:70228 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70229 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70230 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70277 vom 2026-09-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan