CVE-2026-75880: Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of serviceCVE-2026-75880: authenticated ActiveMQ Artemis clients can cause denial of service via crafted selector wildcard handling in affected versions.oss-securitySep 10, 00:49 UTC · Sep 10, 2026Vulnerability7 sourcesCVE-2026-75880130
CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletionCVE-2026-67593: remote attackers can delete ActiveMQ Artemis queues via pre-authentication Openwire protocol handling in affected versions.oss-securitySep 10, 00:48 UTC · Sep 10, 2026Vulnerability7 sourcesCVE-2026-67593345
CVE-2026-57967: Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachmentCVE-2026-57967: unauthenticated attackers can hijack authenticated ActiveMQ Artemis sessions via crafted CORE protocol SESSION_REATTACH packets.oss-securitySep 10, 00:46 UTC · Sep 10, 2026Vulnerability7 sourcesCVE-2026-57967145
CVE-2026-57822: Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of serviceApache fixed CVE-2026-57822, a deserialization flaw in ActiveMQ Artemis management messaging letting authorized clients trigger broker denial of service.oss-securitySep 10, 00:44 UTC · Sep 10, 2026Vulnerability7 sourcesCVE-2026-578222 · 1 read35
CVE-2026-49364: Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered PeersApache Artemis CVE-2026-49364 exposes cluster credentials to network-adjacent peers discovered before authentication completes.oss-securitySep 10, 00:43 UTC · Sep 10, 2026Vulnerability7 sourcesCVE-2026-49364135
CVE-2026-49363: Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology SubscriptionCVE-2026-49363 lets unauthenticated attackers subscribe to ActiveMQ Artemis CORE topology and harvest cluster node details pre-authentication.oss-securitySep 10, 00:41 UTC · Sep 10, 2026Vulnerability7 sourcesCVE-2026-493633 · 1 read28
CVE-2026-49362: Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue CreationCVE-2026-49362: unauthenticated attackers can create arbitrary durable queues in ActiveMQ Artemis via the CORE protocol, enabling denial of service.oss-securitySep 10, 00:39 UTC · Sep 10, 2026Vulnerability7 sourcesCVE-2026-493622 · 1 read38