Qlik Sense servers hit with blocked reverse-shell attempts
Cynet blocked the October attempts; the operator’s server also staged ActiveMQ and Veeam exploit tooling.
Stories per day · 30 days
2 RSS
Relatedapache2input-validation2acl1authorization1bypass1cactus1denial-of-service1dn-injection1exposure-management1financial-services1insurance1kahadb1ldap1nodezero1oom1pentesting1powershell1qlik-sense1
6 stories, newest first · one card per story
Stories tagged #activemq
Apache ActiveMQ retains write access after ACL revocation
Cached authorization flaw allows continued write access after live ACL removal in versions before 6.3.3.
Finance firms found attack paths after expanding NodeZero testing
Horizon3 case studies say a Dev environment reached production Domain Admin and one credential exposed about 300,000 files.
1
Hitachi Energy SOI
CISA warns Hitachi Energy SOI 2.0.0–2.2.0 has an authenticated ActiveMQ code-injection flaw, CVE-2026-34197 (CVSS 8.8).
7
Armatura LLC Armatura One
CISA warns Armatura One embeds a critical unauthenticated ActiveMQ flaw that can remotely execute code.
CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion
CVE-2026-67593: remote attackers can delete ActiveMQ Artemis queues via pre-authentication Openwire protocol handling in affected versions.