#Message Broker
All CosmicBytez Labs articles tagged #Message Broker, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-49364: Apache ActiveMQ Artemis Cluster Credential Exposure
A pre-auth flaw in Artemis cluster discovery lets network-adjacent attackers capture admin credentials during the connection handshake.
- Security
CVE-2026-57967: Apache ActiveMQ Artemis Session Hijack via CORE Protocol
Attackers can craft a CORE protocol SESSION_REATTACH packet to steal an existing Artemis session and its authenticated privileges.
- Security
CVE-2026-67593: Apache ActiveMQ Artemis Unauthenticated Queue Deletion
A crafted OpenWire RemoveSubscriptionInfo command lets unauthenticated attackers delete Artemis broker queues before login completes.
- News
Recent Apache ActiveMQ Vulnerability Exploited in the Wild
CVE-2026-34197, a remote code execution vulnerability in Apache ActiveMQ's Jolokia management API, is being actively exploited in the wild. CISA has added...
- News
13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute
Security researchers discovered a remote code execution vulnerability in Apache ActiveMQ Classic that went undetected for 13 years, allowing attackers to...