https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-74761.htmlhttps://patchthecve.com/cve/CVE-2026-74761.htmlFri, 18 Sep 2026 14:37:42 +0000HIGH 7.5: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.https://patchthecve.com/cve/CVE-2026-61487.htmlhttps://patchthecve.com/cve/CVE-2026-61487.htmlWed, 05 Aug 2026 18:46:33 +0000MEDIUM 6.5: Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real queuhttps://patchthecve.com/cve/CVE-2026-59878.htmlhttps://patchthecve.com/cve/CVE-2026-59878.htmlWed, 05 Aug 2026 18:46:44 +0000HIGH 7.5: Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done rapid