{"action":"Upgrade org.apache.activemq:activemq-broker to 5.19.5 (5.x) or 6.2.3 (6.x) or later.","affected":[{"fixed":"5.19.5","introduced":"0"},{"fixed":"6.2.3","introduced":"6.0.0"}],"component":"org.apache.activemq:activemq-broker","cve_ids":["CVE-2026-34197"],"ecosystem":"Maven","exploited":true,"fixed_versions":["5.19.5","6.2.3"],"ghsa_id":"GHSA-rxpj-7qvf-xv32","id":"tcs_01M5N9CWSC8R4SWK4FPEWGQRCX","modified_at":"2026-09-10T03:50:44.927548510Z","published_at":"2026-04-07T09:31:22Z","references":["https://osv.dev/vulnerability/GHSA-rxpj-7qvf-xv32","https://nvd.nist.gov/vuln/detail/CVE-2026-34197","https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt","https://github.com/apache/activemq","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34197","http://www.openwall.com/lists/oss-security/2026/04/06/3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-rxpj-7qvf-xv32","url":"https://osv.dev/vulnerability/GHSA-rxpj-7qvf-xv32"},{"source":"kev","source_id":"CVE-2026-34197","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans"}