Skip to contentApache Software Foundation Activemq Artemis vulnerabilities
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue CreationCVE-2026-49362Fix available7.5 High
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology SubscriptionCVE-2026-493637.5 High
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered PeersCVE-2026-493649.1 Critical
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of serviceCVE-2026-578226.5 Medium
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachmentCVE-2026-57967Public exploit9.8 Critical
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletionCVE-2026-675939.1 Critical
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of serviceCVE-2026-758806.5 Medium
- apache artemis, apache software foundation activemq artemis stomp protocol, artemis stomp protocol +2 moreApache Artemis Stomp Protocol, Apache ActiveMQ Artemis Stomp Protocol: Address routing-type can be updated by STOMP protocol user without the createAddress permissionCVE-2026-40914Fix available4.3 Medium
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permissionCVE-2026-32642Fix available2.3 Low
- apache artemis, apache software foundation activemq artemis, red hat amq broker 7.12.6 +17 more +19 moreApache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federationCVE-2026-27446Fix availableEPSS 11.4%9.3 Critical
- apache artemis, apache software foundation activemq artemis +1 moreApache ActiveMQ Artemis: Passwords leaking from broker properties in the debug logCVE-2025-27391Fix available6.8 Medium
- apache artemis, apache software foundation activemq artemis +1 moreApache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permissionCVE-2025-27427Fix available2.3 Low
- apache artemis, apache software foundation activemq artemis +1 moreApache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeansCVE-2023-50780Public exploitFix availableEPSS 17.3%8.8 High
- apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 moreHTML Injection in ActiveMQ Artemis Web ConsoleCVE-2022-35278Fix available6.1 Medium
- apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 moreApache ActiveMQ Artemis DoSCVE-2022-23913Fix available7.5 High
- apache artemis, apache software foundation activemq artemis, netapp oncommand workflow automation +2 moreFlaw in ActiveMQ Artemis OpenWire supportCVE-2021-26118Fix available7.5 High
- apache artemis, apache software foundation activemq artemis +1 moreCross-site Scripting (XSS) in Apache ActiveMQ ArtemisCVE-2020-13932Fix available6.1 Medium