{"schema_version":1,"title":"org.apache.activemq:activemq-all (Maven) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 17 vulnerabilities in org.apache.activemq:activemq-all (Maven): 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-54475, was published on 30 June 2026.","url":"https://junglewise.ai/threats/technologies/org-apache-activemq-activemq-all","json_url":"https://junglewise.ai/threats/technologies/org-apache-activemq-activemq-all.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/org-apache-activemq-activemq-all","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":12,"all_time":17,"critical":1,"exploited":1,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":17},"latest":[{"cve":"CVE-2026-54475","cvss":7.5,"epss":0.0056,"slug":"cve-2026-54475-apache-activemq-missing-authorization-in-temporary-destinations","title":"Apache ActiveMQ missing authorization in temporary destinations","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:30.407+00:00","url":"https://junglewise.ai/threats/cve-2026-54475-apache-activemq-missing-authorization-in-temporary-destinations"},{"cve":"CVE-2026-53917","cvss":7.5,"epss":0.0074,"slug":"cve-2026-53917-apache-activemq-dos-via-excessive-memory-allocation-in-openwire","title":"Apache ActiveMQ DoS via excessive memory allocation in OpenWire map unmarshaling","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:30.273+00:00","url":"https://junglewise.ai/threats/cve-2026-53917-apache-activemq-dos-via-excessive-memory-allocation-in-openwire"},{"cve":"CVE-2026-50750","cvss":7.5,"epss":0.0069,"slug":"cve-2026-50750-apache-activemq-denial-of-service-via-out-of-memory","title":"Apache ActiveMQ Denial of Service via Out of Memory","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:29.933+00:00","url":"https://junglewise.ai/threats/cve-2026-50750-apache-activemq-denial-of-service-via-out-of-memory"},{"cve":"CVE-2026-50734","cvss":7.5,"epss":0.0074,"slug":"cve-2026-50734-apache-activemq-denial-of-service-via-excessive-memory-allocation","title":"Apache ActiveMQ denial of service via excessive memory allocation","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:29.827+00:00","url":"https://junglewise.ai/threats/cve-2026-50734-apache-activemq-denial-of-service-via-excessive-memory-allocation"},{"cve":"CVE-2026-49434","cvss":7.5,"epss":0.0063,"slug":"cve-2026-49434-apache-activemq-improper-input-validation-in-ldap-integration","title":"Apache ActiveMQ Improper Input Validation in LDAP integration","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:29.4+00:00","url":"https://junglewise.ai/threats/cve-2026-49434-apache-activemq-improper-input-validation-in-ldap-integration"},{"cve":"CVE-2026-49432","cvss":7.5,"epss":0.0079,"slug":"cve-2026-49432-apache-activemq-denial-of-service-in-stomp-connector","title":"Apache ActiveMQ denial of service in STOMP connector","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:29.28+00:00","url":"https://junglewise.ai/threats/cve-2026-49432-apache-activemq-denial-of-service-in-stomp-connector"},{"cve":"CVE-2026-49270","cvss":5.9,"epss":0.0051,"slug":"cve-2026-49270-apache-activemq-information-disclosure-in-durable-subscriptions","title":"Apache ActiveMQ information disclosure in durable subscriptions","severity":"medium","exploited":false,"published_at":"2026-06-01T09:16:20.65+00:00","url":"https://junglewise.ai/threats/cve-2026-49270-apache-activemq-information-disclosure-in-durable-subscriptions"},{"cve":"CVE-2026-45505","cvss":8.8,"epss":0.0088,"slug":"cve-2026-45505-apache-activemq-code-injection-via-jolokia-jmx-http-bridge-bypass","title":"Apache ActiveMQ code injection via Jolokia JMX-HTTP bridge bypass","severity":"high","exploited":false,"published_at":"2026-06-01T09:16:19.7+00:00","url":"https://junglewise.ai/threats/cve-2026-45505-apache-activemq-code-injection-via-jolokia-jmx-http-bridge-bypass"},{"cve":"CVE-2026-42588","cvss":8.1,"epss":0.0066,"slug":"cve-2026-42588-apache-activemq-code-injection-in-jolokia-jmx-http-bridge","title":"Apache ActiveMQ code injection in Jolokia JMX-HTTP bridge","severity":"high","exploited":false,"published_at":"2026-06-01T09:16:19.137+00:00","url":"https://junglewise.ai/threats/cve-2026-42588-apache-activemq-code-injection-in-jolokia-jmx-http-bridge"},{"cve":"CVE-2026-41044","cvss":8.8,"epss":0.0115,"slug":"cve-2026-41044-apache-activemq-code-injection-in-admin-web-console","title":"Apache ActiveMQ code injection in admin web console","severity":"high","exploited":false,"published_at":"2026-04-24T11:16:22.79+00:00","url":"https://junglewise.ai/threats/cve-2026-41044-apache-activemq-code-injection-in-admin-web-console"},{"cve":"CVE-2026-41043","cvss":6.5,"epss":0.0056,"slug":"cve-2026-41043-apache-activemq-vulnerable-to-cross-site-scripting","title":"Apache ActiveMQ Vulnerable to Cross-site Scripting","severity":"medium","exploited":false,"published_at":"2026-04-24T11:16:22.67+00:00","url":"https://junglewise.ai/threats/cve-2026-41043-apache-activemq-vulnerable-to-cross-site-scripting"},{"cve":"CVE-2026-40466","cvss":8.8,"epss":0.0411,"slug":"cve-2026-40466-apache-activemq-code-injection-via-http-discovery-transport","title":"Apache ActiveMQ code injection via HTTP Discovery transport bypass","severity":"high","exploited":false,"published_at":"2026-04-24T11:16:22.54+00:00","url":"https://junglewise.ai/threats/cve-2026-40466-apache-activemq-code-injection-via-http-discovery-transport"},{"cve":"CVE-2026-39304","cvss":7.5,"epss":0.0107,"slug":"cve-2026-39304-apache-activemq-dos-via-memory-exhaustion-in-nio-ssl-transport","title":"Apache ActiveMQ DoS via memory exhaustion in NIO SSL transport","severity":"high","exploited":false,"published_at":"2026-04-10T11:16:23.143+00:00","url":"https://junglewise.ai/threats/cve-2026-39304-apache-activemq-dos-via-memory-exhaustion-in-nio-ssl-transport"},{"cve":"CVE-2026-40046","cvss":7.5,"epss":0.0038,"slug":"cve-2026-40046-apache-activemq-integer-overflow-in-mqtt-control-packet","title":"Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for \": MQ","severity":"high","exploited":false,"published_at":"2026-04-09T17:16:31.65+00:00","url":"https://junglewise.ai/threats/cve-2026-40046-apache-activemq-integer-overflow-in-mqtt-control-packet"},{"cve":"CVE-2026-34197","cvss":8.8,"epss":0.1549,"slug":"cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge","title":"Apache ActiveMQ code injection in Jolokia JMX-HTTP bridge","severity":"critical","exploited":true,"published_at":"2026-04-07T09:16:20.967+00:00","url":"https://junglewise.ai/threats/cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge"},{"cve":"CVE-2026-33227","cvss":4.3,"epss":0.0042,"slug":"cve-2026-33227-apache-activemq-improper-validation-and-restriction-of-a","title":"Apache ActiveMQ: Improper validation and restriction of a classpath path name","severity":"medium","exploited":false,"published_at":"2026-04-07T09:16:20.75+00:00","url":"https://junglewise.ai/threats/cve-2026-33227-apache-activemq-improper-validation-and-restriction-of-a"},{"cve":"CVE-2025-66168","cvss":5.4,"epss":0.0078,"slug":"cve-2025-66168-apache-activemq-integer-overflow-in-mqtt-packet-decoding","title":"Apache ActiveMQ integer overflow in MQTT packet decoding","severity":"medium","exploited":false,"published_at":"2026-03-04T09:31:07+00:00","url":"https://junglewise.ai/threats/cve-2025-66168-apache-activemq-integer-overflow-in-mqtt-packet-decoding"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"org.jenkins-ci.main:jenkins-core (Maven)","slug":"org-jenkins-ci-main-jenkins-core","vulnerabilities":259,"url":"https://junglewise.ai/threats/technologies/org-jenkins-ci-main-jenkins-core"},{"name":"org.apache.tomcat:tomcat (Maven)","slug":"org-apache-tomcat-tomcat","vulnerabilities":169,"url":"https://junglewise.ai/threats/technologies/org-apache-tomcat-tomcat"},{"name":"com.liferay.portal:release.portal.bom (Maven)","slug":"com-liferay-portal-release-portal-bom","vulnerabilities":159,"url":"https://junglewise.ai/threats/technologies/com-liferay-portal-release-portal-bom"},{"name":"com.liferay.portal:release.dxp.bom (Maven)","slug":"com-liferay-portal-release-dxp-bom","vulnerabilities":125,"url":"https://junglewise.ai/threats/technologies/com-liferay-portal-release-dxp-bom"},{"name":"org.keycloak:keycloak-services (Maven)","slug":"org-keycloak-keycloak-services","vulnerabilities":122,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-services"},{"name":"com.fasterxml.jackson.core:jackson-databind (Maven)","slug":"com-fasterxml-jackson-core-jackson-databind","vulnerabilities":86,"url":"https://junglewise.ai/threats/technologies/com-fasterxml-jackson-core-jackson-databind"},{"name":"org.apache.tomcat.embed:tomcat-embed-core (Maven)","slug":"org-apache-tomcat-embed-tomcat-embed-core","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/org-apache-tomcat-embed-tomcat-embed-core"},{"name":"org.apache.struts:struts2-core (Maven)","slug":"org-apache-struts-struts2-core","vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/org-apache-struts-struts2-core"},{"name":"org.keycloak:keycloak-core (Maven)","slug":"org-keycloak-keycloak-core","vulnerabilities":57,"url":"https://junglewise.ai/threats/technologies/org-keycloak-keycloak-core"},{"name":"org.xwiki.platform:xwiki-platform-oldcore (Maven)","slug":"org-xwiki-platform-xwiki-platform-oldcore","vulnerabilities":46,"url":"https://junglewise.ai/threats/technologies/org-xwiki-platform-xwiki-platform-oldcore"},{"name":"org.apache.tomcat:tomcat-catalina (Maven)","slug":"org-apache-tomcat-tomcat-catalina","vulnerabilities":44,"url":"https://junglewise.ai/threats/technologies/org-apache-tomcat-tomcat-catalina"},{"name":"org.elasticsearch:elasticsearch (Maven)","slug":"org-elasticsearch-elasticsearch","vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/org-elasticsearch-elasticsearch"}],"technology":{"hub":true,"name":"org.apache.activemq:activemq-all (Maven)","slug":"org-apache-activemq-activemq-all","vendor":{"hub":true,"name":"Maven","slug":"maven","url":"https://junglewise.ai/threats/vendors/maven"},"aliases":[],"homepage":"https://activemq.apache.org/","repo_url":"https://github.com/apache/activemq","description":"Apache ActiveMQ message broker library with all components for Java applications.","url":"https://junglewise.ai/threats/technologies/org-apache-activemq-activemq-all"},"most_severe":[{"cve":"CVE-2026-34197","cvss":8.8,"epss":0.1549,"slug":"cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge","title":"Apache ActiveMQ code injection in Jolokia JMX-HTTP bridge","severity":"critical","exploited":true,"published_at":"2026-04-07T09:16:20.967+00:00","url":"https://junglewise.ai/threats/cve-2026-34197-apache-activemq-code-injection-in-jolokia-jmx-http-bridge"},{"cve":"CVE-2026-40466","cvss":8.8,"epss":0.0411,"slug":"cve-2026-40466-apache-activemq-code-injection-via-http-discovery-transport","title":"Apache ActiveMQ code injection via HTTP Discovery transport bypass","severity":"high","exploited":false,"published_at":"2026-04-24T11:16:22.54+00:00","url":"https://junglewise.ai/threats/cve-2026-40466-apache-activemq-code-injection-via-http-discovery-transport"},{"cve":"CVE-2026-41044","cvss":8.8,"epss":0.0115,"slug":"cve-2026-41044-apache-activemq-code-injection-in-admin-web-console","title":"Apache ActiveMQ code injection in admin web console","severity":"high","exploited":false,"published_at":"2026-04-24T11:16:22.79+00:00","url":"https://junglewise.ai/threats/cve-2026-41044-apache-activemq-code-injection-in-admin-web-console"},{"cve":"CVE-2026-45505","cvss":8.8,"epss":0.0088,"slug":"cve-2026-45505-apache-activemq-code-injection-via-jolokia-jmx-http-bridge-bypass","title":"Apache ActiveMQ code injection via Jolokia JMX-HTTP bridge bypass","severity":"high","exploited":false,"published_at":"2026-06-01T09:16:19.7+00:00","url":"https://junglewise.ai/threats/cve-2026-45505-apache-activemq-code-injection-via-jolokia-jmx-http-bridge-bypass"},{"cve":"CVE-2026-42588","cvss":8.1,"epss":0.0066,"slug":"cve-2026-42588-apache-activemq-code-injection-in-jolokia-jmx-http-bridge","title":"Apache ActiveMQ code injection in Jolokia JMX-HTTP bridge","severity":"high","exploited":false,"published_at":"2026-06-01T09:16:19.137+00:00","url":"https://junglewise.ai/threats/cve-2026-42588-apache-activemq-code-injection-in-jolokia-jmx-http-bridge"},{"cve":"CVE-2026-39304","cvss":7.5,"epss":0.0107,"slug":"cve-2026-39304-apache-activemq-dos-via-memory-exhaustion-in-nio-ssl-transport","title":"Apache ActiveMQ DoS via memory exhaustion in NIO SSL transport","severity":"high","exploited":false,"published_at":"2026-04-10T11:16:23.143+00:00","url":"https://junglewise.ai/threats/cve-2026-39304-apache-activemq-dos-via-memory-exhaustion-in-nio-ssl-transport"},{"cve":"CVE-2026-49432","cvss":7.5,"epss":0.0079,"slug":"cve-2026-49432-apache-activemq-denial-of-service-in-stomp-connector","title":"Apache ActiveMQ denial of service in STOMP connector","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:29.28+00:00","url":"https://junglewise.ai/threats/cve-2026-49432-apache-activemq-denial-of-service-in-stomp-connector"},{"cve":"CVE-2026-53917","cvss":7.5,"epss":0.0074,"slug":"cve-2026-53917-apache-activemq-dos-via-excessive-memory-allocation-in-openwire","title":"Apache ActiveMQ DoS via excessive memory allocation in OpenWire map unmarshaling","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:30.273+00:00","url":"https://junglewise.ai/threats/cve-2026-53917-apache-activemq-dos-via-excessive-memory-allocation-in-openwire"},{"cve":"CVE-2026-50734","cvss":7.5,"epss":0.0074,"slug":"cve-2026-50734-apache-activemq-denial-of-service-via-excessive-memory-allocation","title":"Apache ActiveMQ denial of service via excessive memory allocation","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:29.827+00:00","url":"https://junglewise.ai/threats/cve-2026-50734-apache-activemq-denial-of-service-via-excessive-memory-allocation"},{"cve":"CVE-2026-50750","cvss":7.5,"epss":0.0069,"slug":"cve-2026-50750-apache-activemq-denial-of-service-via-out-of-memory","title":"Apache ActiveMQ Denial of Service via Out of Memory","severity":"high","exploited":false,"published_at":"2026-06-30T11:16:29.933+00:00","url":"https://junglewise.ai/threats/cve-2026-50750-apache-activemq-denial-of-service-via-out-of-memory"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}