CVE-2026-34197
2 advisories.
Maven/org.apache.activemq:activemq-broker CVE-2026-34197: high 8.8, exploited
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
Action: Upgrade org.apache.activemq:activemq-broker to 5.19.5 (5.x) or 6.2.3 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.19.5 | - |
| 6.0.0 | 6.2.3 | - |
Fixed versions
| 5.19.5 | 6.2.3 |
Sources
- osv: GHSA-rxpj-7qvf-xv32
- kev: CVE-2026-34197
- https://nvd.nist.gov/vuln/detail/CVE-2026-34197
- https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt
- https://github.com/apache/activemq
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34197
- http://www.openwall.com/lists/oss-security/2026/04/06/3
CVE-2026-34197 · published · modified · JSON
Maven/org.apache.activemq:activemq-all CVE-2026-34197: high 8.8, exploited
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
Action: Upgrade org.apache.activemq:activemq-all to 5.19.5 (5.x) or 6.2.3 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.19.5 | - |
| 6.0.0 | 6.2.3 | - |
Fixed versions
| 5.19.5 | 6.2.3 |
Sources
- osv: GHSA-rxpj-7qvf-xv32#Maven/org.apache.activemq:activemq-all
- kev: CVE-2026-34197
- https://nvd.nist.gov/vuln/detail/CVE-2026-34197
- https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt
- https://github.com/apache/activemq
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34197
- http://www.openwall.com/lists/oss-security/2026/04/06/3
CVE-2026-34197 · published · modified · JSON