Search: “activemq”

CVE-2026-75880: Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service

CVE-2026-75880: authenticated ActiveMQ Artemis clients can cause denial of service via crafted selector wildcard handling in affected versions.

An authenticated client can attach a consumer with a selector containing crafted wildcard usage, causing excessive evaluation during message delivery attempts that occupies a shared broker thread and leads to denial of service. Affected versions are Apache Artemis artemis-selector 2.50.0 through 2.56.0 and Apache ActiveMQ Artemis artemis-selector 1.0.0 through 2.44.0. Apache rates the issue moderate.

oss-security·Sep 10, 00:49 UTC · 7d agoVulnerability 7 sourcesCVE-2026-758801

CVE-2026-57822: Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service

Apache fixed CVE-2026-57822, a deserialization flaw in ActiveMQ Artemis management messaging letting authorized clients trigger broker denial of service.

Apache disclosed a deserialization issue in message-based management request handling for Apache Artemis and Apache ActiveMQ Artemis. It affects Apache Artemis (artemis-core-client) 2.50.0 through 2.56.0 and ActiveMQ Artemis (artemis-core-client) 1.3.0 through 2.44.0. Exploitation requires an authenticated client authorized with MANAGE permission using management-via-messaging; parameter processing can trigger denial of service. Apache rates the issue as important.

oss-security·Sep 10, 00:44 UTC · 7d agoVulnerability 7 sourcesCVE-2026-57822

CVE-2026-49362: Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation

CVE-2026-49362: unauthenticated attackers can create arbitrary durable queues in ActiveMQ Artemis via the CORE protocol, enabling denial of service.

A missing authentication check in the CORE protocol handler of Apache Artemis and Apache ActiveMQ Artemis, tracked as CVE-2026-49362, lets unauthenticated remote attackers create arbitrary durable queues. This enables unauthorized broker state manipulation and potential denial of service. Affected versions are artemis-server in Apache Artemis 2.50.0 through 2.56.0 and ActiveMQ Artemis 1.0.0 through 2.44.0. Apache rates the issue as important.

oss-security·Sep 10, 00:39 UTC · 7d agoVulnerability 7 sourcesCVE-2026-493621

CVE-2026-49364: Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers

Apache Artemis CVE-2026-49364 exposes cluster credentials to network-adjacent peers discovered before authentication completes.

Apache disclosed a pre-authentication credential exposure issue in Apache Artemis and Apache ActiveMQ Artemis, tracked as CVE-2026-49364. Affected components span artemis-core-client and artemis-server from version 1.0.0 (ActiveMQ Artemis) and 2.50.0 (Artemis) through 2.44.0 and 2.56.0 respectively. An unauthenticated network-adjacent attacker can leverage credentials exposed to discovered cluster peers. Apache rates the issue as important.

oss-security·Sep 10, 00:43 UTC · 7d agoVulnerability 7 sourcesCVE-2026-493641

Razorback Roadmap and Status Report

Cisco Talos·May 3, 21:41 UTC · May 3, 2011Exploit / PoC

Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

The Hacker News·May 29, 04:42 UTC · May 29, 2024MalwareCVE-2024-33655

Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking

The Hacker News·May 22, 03:20 UTC · May 22, 2024Malware

Magnet Goblin group used a new Linux variant of NerbianRAT malware

Security Affairs·Mar 11, 10:45 UTC · Mar 11, 2024MalwareCVE-2024-21887CVE-2022-24086CVE-2023-41265+5 CVEs

Razorback Appliance

Cisco Talos·Feb 24, 19:53 UTC · Feb 24, 2012Tools