PatchTheCVEartemis vulnerabilities and fixes
Recent CVEs affecting artemis, with upgrade or downgrade steps. 7 tracked.
artemis has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-09-10. Highest priority: CVE-2026-57967 (score 66/100).
- CVE-2026-57967 CRITICAL 9.8 UPGRADE An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing sess
- CVE-2026-75880 MEDIUM 6.5 UPGRADE An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results
- CVE-2026-49362 HIGH 7.5 UPGRADE An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unaut
- CVE-2026-49363 HIGH 7.5 UPGRADE An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by send
- CVE-2026-49364 CRITICAL 9.1 UPGRADE An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credenti
- CVE-2026-57822 MEDIUM 6.5 UPGRADE When the broker is processing message-based management requests, sent by an authenticated messaging client tha
- CVE-2026-67593 CRITICAL 9.1 UPGRADE A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the
FAQ
How do I fix artemis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is artemis being exploited right now?
None of the tracked artemis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which artemis CVE should I patch first?
CVE-2026-57967 currently ranks highest (66/100): An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing sess.