CVE-2026-59878

highpriority · track · 0EPSS 0.008 · 56 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.78% (56th) EPSS

CVSS 7.5 · high

Is it mine?

19 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-27

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done rapidly enough can lead to exhaustion of the NIO thread pool denying service to other connections. This issue affects Apache ActiveMQ AMQP: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ All: before 5.19.9, from 6.0.0 before 6.2.8. Users are recommended to upgrade to version 5.19.9, 6.2.8, or 6.3.0 which fixes the issue.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 3.9 · impact 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20US

affected products (19)

Products and version ranges known to be affected.

Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
IBM IBM QRadar SIEM <7.5.0 UP16 IF01< 7.5.0 UP16 IF01cert_bundDE
IBM IBM QRadar SIEM <7.6.0.3< 7.6.0.3cert_bundDE
IBM QRadar SIEM< 7.5.0 UP16 IF01cert_bundDE
IBM QRadar SIEM< 7.6.0.3cert_bundDE
Apache Software Foundation Apache ActiveMQ0 → 5.19.9enisa_euvdEU
Apache Software Foundation Apache ActiveMQ6.0.0 → 6.2.8enisa_euvdEU
Apache Software Foundation Apache ActiveMQ AMQP0 → 5.19.9enisa_euvdEU
Apache Software Foundation Apache ActiveMQ AMQP6.0.0 → 6.2.8enisa_euvdEU
Apache Software Foundation Apache ActiveMQ All0 → 5.19.9enisa_euvdEU
Apache Software Foundation Apache ActiveMQ All6.0.0 → 6.2.8enisa_euvdEU
apache activemq< 5.19.9nvdUScpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
apache activemq6.0.0 → 6.2.8nvdUScpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
apache activemq all< 5.19.9nvdUScpe:2.3:a:apache:activemq_all:*:*:*:*:*:*:*:*
apache activemq all6.0.0 → 6.2.8nvdUScpe:2.3:a:apache:activemq_all:*:*:*:*:*:*:*:*
apache activemq amqp< 5.19.9nvdUScpe:2.3:a:apache:activemq_amqp:*:*:*:*:*:*:*:*
apache activemq amqp6.0.0 → 6.2.8nvdUScpe:2.3:a:apache:activemq_amqp:*:*:*:*:*:*:*:*
Bitnami activemq< 5.19.9osvUSpkg:bitnami/activemq
Bitnami activemq6.0.0 → 6.2.8osvUSpkg:bitnami/activemq

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-2530Apache ActiveMQ: Mehrere SchwachstellenDeutsch2026-07-27csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Apache ActiveMQ ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.
WID-SEC-W-2026-3595IBM QRadar SIEM: Mehrere SchwachstellenDeutsch2026-09-27csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.
BIT-activemq-2026-59878Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS2026-08-17vendor · osvUS
Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done rapidly enough can lead to exhaustion of the NIO thread pool denying service to other connections. This issue affects Apache ActiveMQ AMQP: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ All: before 5.19.9, from 6.0.0 before 6.2.8. Users are recommended to upgrade to version 5.19.9, 6.2.8, or 6.3.0 which fixes the issue.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund nvd osv NVD CVE.org MITRE

published 2026-07-28modified 2026-08-05

references (5)

External citations — patches, advisories, analysis.

http://www.openwall.com/lists/oss-security/2026/07/27/7 cnnvd
https://lists.apache.org/thread/dnyx4d2oldshcj4lthso7b53y4bqmjvn cnnvd
https://lists.apache.org/thread/dnyx4d2oldshcj4lthso7b53y4bqmjvn enisa_euvd
http://www.openwall.com/lists/oss-security/2026/07/27/7Mailing ListThird Party Advisorynvd
https://lists.apache.org/thread/dnyx4d2oldshcj4lthso7b53y4bqmjvnMailing ListVendor Advisorynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan