Apache Software Foundation Apache ActiveMQ Artemis

• CVE-2026-49362 High 7.5 Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation 0.8%
• CVE-2026-49363 High 7.5 Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription 0.8%
• CVE-2026-49364 Critical 9.1 Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers 0.6%
• CVE-2026-57822 Medium 6.5 Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service 0.7%
• CVE-2026-57967 Critical 9.8 Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment 1.5%
• CVE-2026-67593 Critical 9.1 Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion 0.9%
• CVE-2026-75880 Medium 6.5 Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service 0.7%
• CVE-2026-32642 Low 2.3 Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission 0.4%
• CVE-2026-27446 Critical 9.1 Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation 11.4%
• CVE-2025-27391 Medium 6.8 Apache ActiveMQ Artemis: Passwords leaking from broker properties in the debug log 0.4%
• CVE-2025-27427 Low 2.3 Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission 0.7%
• CVE-2023-50780 High 8.8 Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans 17.5%
• CVE-2022-35278 Unrated HTML Injection in ActiveMQ Artemis Web Console 1.7%
• CVE-2022-23913 Unrated Apache ActiveMQ Artemis DoS 2.7%
• CVE-2021-26118 Unrated Flaw in ActiveMQ Artemis OpenWire support 3.9%