{"action":"Upgrade org.apache.artemis:artemis-server to 2.52.0 or later.","affected":[{"fixed":"2.52.0","introduced":"2.50.0"}],"component":"org.apache.artemis:artemis-server","cve_ids":["CVE-2026-27446"],"ecosystem":"Maven","epss":0.114,"exploited":false,"fixed_versions":["2.52.0"],"ghsa_id":"GHSA-fw88-pf9m-p947","id":"tcs_01M5N8WTYG1V63V7GY6M20NM2Z","modified_at":"2026-09-10T03:50:39.026709886Z","published_at":"2026-03-04T09:31:07Z","references":["https://osv.dev/vulnerability/GHSA-fw88-pf9m-p947","https://nvd.nist.gov/vuln/detail/CVE-2026-27446","https://cert-portal.siemens.com/productcert/html/ssa-085541.html","https://github.com/apache/artemis","https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg","http://www.openwall.com/lists/oss-security/2026/03/03/4","http://www.openwall.com/lists/oss-security/2026/03/04/1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fw88-pf9m-p947#Maven/org.apache.artemis:artemis-server","url":"https://osv.dev/vulnerability/GHSA-fw88-pf9m-p947"}],"summary":"Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions"}