tocsin

CVE-2026-42588

3 advisories.

Maven/org.apache.activemq:activemq-broker CVE-2026-42588: high 8.1

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Action: Upgrade org.apache.activemq:activemq-broker to 5.19.7 (5.x) or 6.2.6 (6.x) or later.

Affected

introducedfixedlast affected
05.19.7-
6.0.06.2.6-

Fixed versions

5.19.76.2.6

Sources

CVE-2026-42588 · published · modified · JSON

Maven/org.apache.activemq:activemq-all CVE-2026-42588: high 8.1

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Action: Upgrade org.apache.activemq:activemq-all to 5.19.7 (5.x) or 6.2.6 (6.x) or later.

Affected

introducedfixedlast affected
05.19.7-
6.0.06.2.6-

Fixed versions

5.19.76.2.6

Sources

CVE-2026-42588 · published · modified · JSON

Maven/org.apache.activemq:apache-activemq CVE-2026-42588: high 8.1

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Action: Upgrade org.apache.activemq:apache-activemq to 5.19.7 (5.x) or 6.2.6 (6.x) or later.

Affected

introducedfixedlast affected
05.19.7-
6.0.06.2.6-

Fixed versions

5.19.76.2.6

Sources

CVE-2026-42588 · published · modified · JSON