Apache Artemis vulnerabilities

• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation CVE-2026-49362 Fix available 7.5 HighSeptember 10, 2026
• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription CVE-2026-49363 Fix available 7.5 HighSeptember 10, 2026
• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers CVE-2026-49364 Fix available 9.1 CriticalSeptember 10, 2026
• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service CVE-2026-57822 Fix available 6.5 MediumSeptember 10, 2026
• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment CVE-2026-57967 Public exploitFix available 9.8 CriticalSeptember 10, 2026
• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion CVE-2026-67593 Fix available 9.1 CriticalSeptember 10, 2026
• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service CVE-2026-75880 Fix available 6.5 MediumSeptember 10, 2026
• apache artemis, apache software foundation activemq artemis stomp protocol, artemis stomp protocol +2 more Apache Artemis Stomp Protocol, Apache ActiveMQ Artemis Stomp Protocol: Address routing-type can be updated by STOMP protocol user without the createAddress permission CVE-2026-40914 Fix available 4.3 MediumMay 28, 2026
• apache artemis, apache software foundation activemq artemis +1 more Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission CVE-2026-32642 Fix available 2.3 LowMarch 24, 2026
• apache artemis, apache software foundation activemq artemis, red hat amq broker 7.12.6 +17 more +19 more Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation CVE-2026-27446 Fix available EPSS 11.4% 9.3 CriticalMarch 4, 2026
• apache activemq-artemis, red hat amq broker 7, rhel-9 based middleware containers +2 more Amq: privilege escalation via excessive /etc/passwd permissions CVE-2025-58712 6.4 MediumOctober 22, 2025
• apache artemis, apache software foundation activemq artemis +1 more Apache ActiveMQ Artemis: Passwords leaking from broker properties in the debug log CVE-2025-27391 Fix available 6.8 MediumApril 9, 2025
• apache artemis, apache software foundation activemq artemis +1 more Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission CVE-2025-27427 Fix available 2.3 LowApril 1, 2025
• apache artemis, apache software foundation activemq artemis +1 more Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans CVE-2023-50780 Public exploitFix available EPSS 17.5% 8.8 HighOctober 14, 2024
• apache artemis, redhat amq broker +1 more org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write CVE-2021-4040 Fix available 5.3 MediumAugust 24, 2022
• apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 more HTML Injection in ActiveMQ Artemis Web Console CVE-2022-35278 Fix available 6.1 MediumAugust 23, 2022
• apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 more Apache ActiveMQ Artemis DoS CVE-2022-23913 Fix available 7.5 HighFebruary 4, 2022
• apache artemis, apache software foundation activemq artemis, netapp oncommand workflow automation +2 more Flaw in ActiveMQ Artemis OpenWire support CVE-2021-26118 Fix available 7.5 HighJanuary 27, 2021
• apache activemq, artemis, debian linux +5 more +7 more ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind CVE-2021-26117 Fix available EPSS 11.3% 7.5 HighJanuary 27, 2021
• apache artemis, apache software foundation activemq artemis +1 more Cross-site Scripting (XSS) in Apache ActiveMQ Artemis CVE-2020-13932 Fix available 6.1 MediumJuly 20, 2020
• apache artemis, red hat activemq artemis, netapp oncommand workflow automation +2 more ActiveMQ Artemis has Insufficiently Protected Credentials CVE-2020-10727 Fix available 5.5 MediumJune 26, 2020
• apache artemis, redhat hornetq, red hat, inc. hornetq/artemis +1 more +3 more Uncontrolled Resource Consumption in Artemis and HornetQ CVE-2017-12174 Fix available 7.5 HighMarch 7, 2018
• apache artemis, redhat jboss enterprise application platform +1 more Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain CVE-2016-4978 Fix available 7.2 HighSeptember 27, 2016