Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder
Developer API

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Log in Start free

Home
Vendors
Apache
Activemq Broker

Apache Software Foundation activemq broker Vulnerabilities: CVEs, CISA KEV & Security Advisories

Apache Software Foundation

13 CVEs

1 in CISA KEV

Apache Software Foundation activemq broker Vulnerabilities

CVE security advisories and vulnerability history for activemq broker by Apache Software Foundation.

13

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.0

Avg CVSS

2026–2026

Last updated June 30, 2026

Overview

Apache Software Foundation activemq broker has 13 published CVE records since 2026, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Apache Software Foundation activemq broker, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Apache Software Foundation activemq broker's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High8

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Apache Software Foundation activemq broker's CVEs is confirmed exploited in the wild.

Public exploits

3

3 of Apache Software Foundation activemq broker's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Apache Software Foundation activemq broker version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.19.74 CVEs
6.0.0 <= v < 6.2.64 CVEs
< 5.19.83 CVEs
6.0.0 <= v < 6.2.73 CVEs
< 5.19.42 CVEs
< 5.19.62 CVEs
6.0.0 <= v < 6.2.52 CVEs
< 5.19.31 CVE
5.19.7 <= v <= 5.19.71 CVE
6.0.0 <= v < 6.2.21 CVE
6.0.0 <= v < 6.2.31 CVE
6.0.0 <= v < 6.2.41 CVE
6.2.6 <= v <= 6.2.61 CVE

Fixed in

5.19.74 CVEs
6.2.64 CVEs
5.19.83 CVEs
6.2.73 CVEs
5.19.42 CVEs
5.19.62 CVEs
6.2.52 CVEs
5.19.31 CVE
6.2.21 CVE
6.2.31 CVE
6.2.41 CVE

Find a version

13 CVEs

Sort

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker
CVE-2026-49434
Patch
CWE-20
High · CVSS 7.5
EPSS 0.5% (38th pct)2026-06-30
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270
CVE-2026-50750
Patch
CWE-400
High · CVSS 7.5
EPSS 0.5% (39th pct)2026-06-30
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling
CVE-2026-53917
Patch
CWE-789
High · CVSS 7.5
EPSS 1.2% (64th pct)2026-06-30
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover
CVE-2026-54475
Patch
CWE-862
High · CVSS 7.5
EPSS 0.9% (56th pct)2026-06-30
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector
CVE-2026-42588
Public exploit
Patch
CWE-20
High · CVSS 8.1
EPSS 0.6% (44th pct)2026-06-01
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass
CVE-2026-45505
Patch
CWE-20
High · CVSS 8.8
EPSS 0.6% (45th pct)2026-06-01
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization during destination removal
CVE-2026-46605
Patch
CWE-285
Medium · CVSS 4.3
EPSS 0.3% (27th pct)2026-06-01
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)
CVE-2026-49270
Patch
CWE-1230
Medium · CVSS 5.9
EPSS 0.4% (29th pct)2026-06-01
Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia
CVE-2026-41044
Patch
CWE-20
Medium · CVSS 6.3
EPSS 1.0% (59th pct)2026-04-24
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URI
CVE-2026-40466
Public exploit
Patch
CWE-20
Medium · CVSS 6.3
EPSS 4.8% (91th pct)2026-04-24
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM
CVE-2026-39304
Patch
CWE-400
High · CVSS 7.5
EPSS 0.9% (56th pct)2026-04-10
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory
CVE-2026-33227
Patch
CWE-22
Medium · CVSS 4.3
EPSS 0.4% (34th pct)2026-04-07
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
CVE-2026-34197
CISA KEV
Public exploit
Patch
CWE-20
Added to CISA KEV 2026-04-16
High · CVSS 8.8
EPSS 97.2% (100th pct)2026-04-07

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation activemq broker CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation6 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-1230Exposure of Sensitive Information Through Metadata1 CVE
CWE-789Memory Allocation with Excessive Size Value1 CVE
CWE-862Missing Authorization1 CVE
CWE-285Improper Authorization1 CVE
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server351 CVEs tomcat265 CVEs airflow183 CVEs Apache Airflow136 CVEs apache-airflow127 CVEs Apache HTTP Server125 CVEs httpd125 CVEs org.apache.tomcat:tomcat118 CVEs

All Apache Software Foundation vulnerabilities

Frequently asked questions

Common questions about Apache Software Foundation activemq broker vulnerabilities.

How many CVEs does Apache Software Foundation activemq broker have?: Apache Software Foundation activemq broker has 13 published CVE records since 2026.
How many Apache Software Foundation activemq broker CVEs are in CISA KEV?: Yes — 1 of Apache Software Foundation activemq broker's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Apache Software Foundation activemq broker vulnerabilities?: Yes — 3 of Apache Software Foundation activemq broker's CVEs have a known public exploit.
Which versions of Apache Software Foundation activemq broker are affected?: 24 distinct Apache Software Foundation activemq broker versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation activemq broker CVEs?: Apache Software Foundation activemq broker's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-400 (Uncontrolled Resource Consumption), CWE-1230 (Exposure of Sensitive Information Through Metadata), CWE-789 (Memory Allocation with Excessive Size Value).
What is the average severity of Apache Software Foundation activemq broker CVEs?: The average CVSS base score across Apache Software Foundation activemq broker's scored CVEs is 7.0.

References

All Apache Software Foundation vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation activemq broker vulnerabilities

Monitor new Apache Software Foundation activemq broker vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References