Apache Software Foundation Apache Artemis vulnerabilities

CVE-2026-57967 [CRITICAL] CWE-306 CVE-2026-57967: An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an exi An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.

CVE-2026-49364 [CRITICAL] CWE-306 CVE-2026-49364: An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrativ An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the

CVE-2026-67593 [CRITICAL] CWE-306 CVE-2026-67593: A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a qu A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recomm

CVE-2026-49363 [HIGH] CWE-306 CVE-2026-49363: An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node detai An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a SUBSCRIBE_TOPOLOGY request prior to authentication. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes th

CVE-2026-49362 [HIGH] CWE-306 CVE-2026-49362: An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leadin An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which

CVE-2026-57822 [MEDIUM] CWE-502 CVE-2026-57822: When the broker is processing message-based management requests, sent by an authenticated messaging When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not utilise. The permitted types allow to craft a payload

CVE-2026-75880 [MEDIUM] CWE-1333 CVE-2026-75880: An authenticated client could attach a consumer with a selector containing crafted wildcard usage th An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0

CVE-2026-32642 [MEDIUM] CWE-863 CVE-2026-32642: Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists wh Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue" permission but does not have the "createAddress" permi