ActiveMQ

Search everything

Mentions · 7d1
Mentions · 30d6
All mentions6
First seenNov 3, 2026
Last mentioned6h ago

Timeline

6 articles · newest first

Qlik Sense servers hit with blocked reverse-shell attempts

Cynet blocked the October attempts; the operator’s server also staged ActiveMQ and Veeam exploit tooling.

The Hacker News14:01 UTC · 6h agoThreat actorCVE-2023-41265 CVE-2023-41266 CVE-2023-48365+2

Apache ActiveMQ retains write access after ACL revocation

Cached authorization flaw allows continued write access after live ACL removal in versions before 6.3.3.

oss-securityNov 3, 20:45 UTC · 8d agoVulnerability 5 sourcesCVE-2026-111822

CVE-2026-111821: Apache ActiveMQ KahaDB vulnerable to oversized client identifier poisoning (CVE-2026-111821)

Combined clientId and subscription name exceeding 65,535 bytes can poison the KahaDB journal in versions before 6.3.3 and 5.19.12.

oss-securityNov 3, 20:43 UTC · 8d agoVulnerability 5 sourcesCVE-2026-1118211

CVE-2026-108949: Apache ActiveMQ broker vulnerable to repeated temporary destination requests (CVE-2026-108949)

Repeated rejected ConsumerInfo requests for temporary destinations can lead to broker OOM in versions before 6.3.3 and 5.19.12.

oss-securityNov 3, 20:41 UTC · 8d agoVulnerability 5 sourcesCVE-2026-1089491

CVE-2026-108946: Apache ActiveMQ broker does not verify user provided connection ID (CVE-2026-108946)

User provided connection IDs are not validated against bound connection state in versions before 6.3.3 and 5.19.12.

oss-securityNov 3, 20:40 UTC · 8d agoVulnerability 5 sourcesCVE-2026-108946

Apache ActiveMQ LDAPAuthorizationMap allows authorization bypass via DN injection (CVE-2026-108500)

Authenticated attackers can create destinations with crafted DN names containing special characters in versions before 6.3.3 and 5.19.12.

oss-securityNov 3, 20:38 UTC · 8d agoVulnerability 5 sourcesCVE-2026-108500

Related CVEs

by mentions

CVE-2023-4126588%9.9
HTTP Request Tunneling Privilege Escalation in Qlik Sense Enterprise for Windows
published Aug 29, 2023Qlik Sense Enterprise for WindowsKEVRansomware
CVE-2023-4836548%9.9
HTTP Request Smuggling/Tunneling in Qlik Sense Allows Privilege Escalation
published Nov 15, 2023Qlik SenseKEVRansomware
CVE-2023-46604100%9.8
Unauthenticated RCE in Apache ActiveMQ via OpenWire Deserialization
published Oct 27, 2023apache activemqKEVRansomwarePoC
CVE-2024-4071190%9.8
Unauthenticated Deserialization RCE in Veeam Backup & Replication
published Sep 7, 2024Veeam Backup & ReplicationKEVRansomwarePoC
CVE-2023-4126685%6.5
Unauthenticated Path Traversal in Qlik Sense Enterprise for Windows
published Aug 29, 2023Qlik Sense Enterprise for WindowsKEVRansomware
CVE-2026-1118228.1
Cached authorizations bypass in Apache ActiveMQ after ACL revocation
published 7d agoApache ActiveMQ
CVE-2026-1118217.5
Improper input validation in Apache ActiveMQ KahaDB durable subscriptions
published 7d agoApache ActiveMQ
CVE-2026-1089466.5
Connection ID Spoofing in Apache ActiveMQ before 6.3.3 and 5.19.12
published 7d agoApache ActiveMQ
CVE-2026-1089496.5
Denial of Service via OOM in Apache ActiveMQ and ActiveMQ Broker
published 7d agoApache ActiveMQ
CVE-2026-108500—
DN injection in Apache ActiveMQ LDAPAuthorizationMapPlugin
published 7d agoApache ActiveMQ

Appears with

Apachevendor · 6
ActiveMQ Brokerproduct · 2
Veeamvendor · 1
Qlikvendor · 1
Arctic Wolforganization · 1
KahaDBproduct · 1
Qlik Senseproduct · 1
CACTUSthreat actor · 1
Cynetorganization · 1

Entities are extracted by the model from each article. First seen Nov 3, 2026, last mentioned 6h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.