ActiveMQ Broker

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenNov 3, 2026
Last mentioned8d ago

Timeline

2 articles · newest first

CVE-2026-108949: Apache ActiveMQ broker vulnerable to repeated temporary destination requests (CVE-2026-108949)

Repeated rejected ConsumerInfo requests for temporary destinations can lead to broker OOM in versions before 6.3.3 and 5.19.12.

oss-securityNov 3, 20:41 UTC · 8d agoVulnerability 5 sourcesCVE-2026-1089491

CVE-2026-108946: Apache ActiveMQ broker does not verify user provided connection ID (CVE-2026-108946)

User provided connection IDs are not validated against bound connection state in versions before 6.3.3 and 5.19.12.

oss-securityNov 3, 20:40 UTC · 8d agoVulnerability 5 sourcesCVE-2026-108946

Related CVEs

by mentions

CVE-2026-1089496.5
Denial of Service via OOM in Apache ActiveMQ and ActiveMQ Broker
published 7d agoApache ActiveMQ
CVE-2026-1089466.5
Connection ID Spoofing in Apache ActiveMQ before 6.3.3 and 5.19.12
published 7d agoApache ActiveMQ

Appears with

Apachevendor · 2
ActiveMQproduct · 2

Entities are extracted by the model from each article. First seen Nov 3, 2026, last mentioned 8d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.