Maven/org.apache.activemq:artemis-server CVE-2026-27446: critical 9.8, EPSS 10.60%

Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-fw88-pf9m-p947
• https://nvd.nist.gov/vuln/detail/CVE-2026-27446
• https://cert-portal.siemens.com/productcert/html/ssa-085541.html
• https://github.com/apache/artemis
• https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg
• http://www.openwall.com/lists/oss-security/2026/03/03/4
• http://www.openwall.com/lists/oss-security/2026/03/04/1

CVE-2026-27446 · published 2026-03-04T09:31:07Z · modified 2026-09-10T03:50:39.026709886Z · JSON