CVE-2026-111821: Apache ActiveMQ KahaDB vulnerable to oversized client identifier poisoning (CVE-2026-111821)
Combined clientId and subscription name exceeding 65,535 bytes can poison the KahaDB journal in versions before 6.3.3 and 5.19.12.
1 stories, newest first · one card per story
Combined clientId and subscription name exceeding 65,535 bytes can poison the KahaDB journal in versions before 6.3.3 and 5.19.12.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views