{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.11.0","last_affected":"2.44.0"}],"component":"org.apache.activemq:artemis-server","cve_ids":["CVE-2026-27446"],"ecosystem":"Maven","epss":0.114,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fw88-pf9m-p947","id":"tcs_01M5N8WTSQTRP8ATK04DC999XS","modified_at":"2026-09-10T03:50:39.026709886Z","published_at":"2026-03-04T09:31:07Z","references":["https://osv.dev/vulnerability/GHSA-fw88-pf9m-p947","https://nvd.nist.gov/vuln/detail/CVE-2026-27446","https://cert-portal.siemens.com/productcert/html/ssa-085541.html","https://github.com/apache/artemis","https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg","http://www.openwall.com/lists/oss-security/2026/03/03/4","http://www.openwall.com/lists/oss-security/2026/03/04/1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fw88-pf9m-p947","url":"https://osv.dev/vulnerability/GHSA-fw88-pf9m-p947"}],"summary":"Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions"}