Apache Activemq All vulnerabilities
3 known vulnerabilities affecting apache/activemq_all.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-74761P3HIGHCVSS 7.5fixed in 5.19.11≥ 6.0.0, < 6.3.22026-09-09
CVE-2026-74761 [HIGH] CWE-20 CVE-2026-74761: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache Acti
Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms.
An authenticated client can spoof clientId when removing a durable topic subscription.
This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 befo
nvd
CVE-2026-59878P3HIGHCVSS 7.5fixed in 5.19.9≥ 6.0.0, < 6.2.82026-07-28
CVE-2026-59878 [HIGH] CWE-20 CVE-2026-59878: Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ Al
Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All.
A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done rapidly enough can lead to exhaustion of the NIO thread poo
nvd
CVE-2026-61487P3MEDIUMCVSS 6.5fixed in 5.19.9≥ 6.0.0, < 6.2.82026-07-28
CVE-2026-61487 [MEDIUM] CWE-285 CVE-2026-61487: Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ
Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.
An authenticated low-privilege user can bypass a per-destination
write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a
comma-separated composite of real queues. This allows publishing messages to any of the de
nvd