Exploit / PoCcriticalExploited in the wild

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

The Hacker Newsby @TheHackersNewsApr 17, 2026 · 13:10 UTC (Apr 17, 2026)2 min read4 · 2 reads

Read at thehackernews.com

Analyze CVE-2026-34197 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-34197 CVE-2024-32114 CVE-2023-46604

Tags: cve-2023-46604 cve-2024-32114 cve-2026-34197 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-46604	Unauthenticated RCE in Apache ActiveMQ via OpenWire Deserialization	9.8	100%	KEVRansomwarePoC	Oct 27, 2023 KEV Nov 2, 2023
CVE-2024-32114	In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (where the Jolokia JMX REST API and the Message REST API are located)	8.8	7%		May 2, 2024
CVE-2026-34197	Authenticated RCE in Apache ActiveMQ via Jolokia JMX-HTTP Bridge	8.8	98%	KEV	Apr 7, 2026 KEV Apr 16, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Apr 17, 2026 Vulnerability / Enterprise Security A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U. S. Cybersecurity and Infrastructure Security Agency (CISA).

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.