#Apache ActiveMQ
All CosmicBytez Labs articles tagged #Apache ActiveMQ, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-49364: Apache ActiveMQ Artemis Cluster Credential Exposure
A pre-auth flaw in Artemis cluster discovery lets network-adjacent attackers capture admin credentials during the connection handshake.
- Security
CVE-2026-57967: Apache ActiveMQ Artemis Session Hijack via CORE Protocol
Attackers can craft a CORE protocol SESSION_REATTACH packet to steal an existing Artemis session and its authenticated privileges.
- Security
CVE-2026-67593: Apache ActiveMQ Artemis Unauthenticated Queue Deletion
A crafted OpenWire RemoveSubscriptionInfo command lets unauthenticated attackers delete Artemis broker queues before login completes.
- News
Actively Exploited Apache ActiveMQ Flaw Impacts 6,400
Shadowserver found over 6,400 Apache ActiveMQ servers exposed online and vulnerable to ongoing attacks exploiting a high-severity code injection...
- Newsletter
Apr 21 Digest: Vercel AI Tool Breach, DPRK $290M, ActiveMQ
Vercel confirms breach through a compromised third-party AI coding tool; North Korean hackers attributed to a $290 million crypto theft; 6,400 Apache...
- News
Recent Apache ActiveMQ Vulnerability Exploited in the Wild
CVE-2026-34197, a remote code execution vulnerability in Apache ActiveMQ's Jolokia management API, is being actively exploited in the wild. CISA has added...
- News
CISA Flags Apache ActiveMQ Flaw as Actively Exploited in Attacks
CISA has added a high-severity Apache ActiveMQ vulnerability to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the...
- News
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache
This week's ThreatsDay Bulletin from The Hacker News covers 20 active threats including a hybrid P2P DDoS botnet, a 13-year-old Apache ActiveMQ RCE flaw...
- News
13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute
Security researchers discovered a remote code execution vulnerability in Apache ActiveMQ Classic that went undetected for 13 years, allowing attackers to...