org.apache.activemq:activemq-mqtt vulnerabilities (Root)

2 vulnerabilities.

• org.apache.activemq:activemq-mqtt Root Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validated CVE-2026-40046 Fix available 7.5 HighApril 9, 2026
• org.apache.activemq:activemq-mqtt Root Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated CVE-2025-66168 Fix available 5.4 MediumMarch 4, 2026