https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-74761.htmlhttps://patchthecve.com/cve/CVE-2026-74761.htmlFri, 18 Sep 2026 14:37:42 +0000HIGH 7.5: Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.https://patchthecve.com/cve/CVE-2026-61487.htmlhttps://patchthecve.com/cve/CVE-2026-61487.htmlWed, 05 Aug 2026 18:46:33 +0000MEDIUM 6.5: Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real queuhttps://patchthecve.com/cve/CVE-2026-54475.htmlhttps://patchthecve.com/cve/CVE-2026-54475.htmlThu, 02 Jul 2026 18:41:49 +0000HIGH 7.5: Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to the connection that created them. The isolation can be broken as this is only checked in the client, allowing a differenhttps://patchthecve.com/cve/CVE-2026-53917.htmlhttps://patchthecve.com/cve/CVE-2026-53917.htmlThu, 02 Jul 2026 18:41:55 +0000HIGH 7.5: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size value for the map. OpenWire message properthttps://patchthecve.com/cve/CVE-2026-50750.htmlhttps://patchthecve.com/cve/CVE-2026-50750.htmlThu, 02 Jul 2026 18:42:47 +0000HIGH 7.5: Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an unauthenticated attacker can now cause broker OOM by sending an repeated BrokerInfo commands without sending a ConnectionInfo, until the brokerhttps://patchthecve.com/cve/CVE-2026-49434.htmlhttps://patchthecve.com/cve/CVE-2026-49434.htmlThu, 02 Jul 2026 18:43:25 +0000HIGH 7.5: Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. An attacker that has access to publish or modify entries in LDAP that match the configured searchBase and searchFilter can instantiate denied transports inside the broker JVM. This can be used thttps://patchthecve.com/cve/CVE-2026-41044.htmlhttps://patchthecve.com/cve/CVE-2026-41044.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 8.8: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to inclhttps://patchthecve.com/cve/CVE-2026-40466.htmlhttps://patchthecve.com/cve/CVE-2026-40466.htmlMon, 26 Oct 2026 22:10:00 +0000HIGH 8.8: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated attacker may bypass the fix in CVE-2026-34197 by adding a connector using an HTTP Discovery transport via BrokerViewhttps://patchthecve.com/cve/CVE-2026-39304.htmlhttps://patchthecve.com/cve/CVE-2026-39304.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.5: Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes thhttps://patchthecve.com/cve/CVE-2026-34197.htmlhttps://patchthecve.com/cve/CVE-2026-34197.htmlMon, 26 Oct 2026 22:10:00 +0000HIGH 8.8: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations ohttps://patchthecve.com/cve/CVE-2026-33227.htmlhttps://patchthecve.com/cve/CVE-2026-33227.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 4.3: Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ. In two instances (when creating a Stomp consumer and also browsing messages in the Web console) an authentica