Apache Software Foundation ActiveMQ Broker

• CVE-2026-108946 Unrated Apache ActiveMQ, ActiveMQ Broker: The broker does not verify user provided connection id matches connection 0.2%
• CVE-2026-108949 Medium 6.5 Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM 0.5%