Apache Artemis
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_artemis:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Artemis (ce640386-4681-55b4-a64e-e2141f3598b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57822 |
vulnerable | 2026-09-16 04:33:40.100534 |
Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service
When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not utilise. The permitted types allow to craft a payload causing excessive computation and pinning the processing thread, leading to denial of service.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.3.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Published: 2026-09-10T04:46:52.192Z
Updated: 2026-09-10T15:53:35.376Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57967 |
vulnerable | 2026-09-16 04:33:40.024574 |
Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Published: 2026-09-10T04:43:10.313Z
Updated: 2026-09-10T15:52:25.278Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67593 |
vulnerable | 2026-09-16 04:33:06.015532 |
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion
A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Published: 2026-09-10T04:40:29.793Z
Updated: 2026-09-10T15:51:10.430Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49364 |
vulnerable | 2026-09-16 04:32:56.038545 |
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Published: 2026-09-10T04:49:27.014Z
Updated: 2026-09-10T15:54:25.139Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49362 |
vulnerable | 2026-09-16 04:32:55.922080 |
Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Published: 2026-09-10T04:56:19.952Z
Updated: 2026-09-10T15:56:53.805Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49363 |
vulnerable | 2026-09-16 04:32:55.715177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-75880 |
vulnerable | 2026-09-16 04:32:53.471199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32642 |
vulnerable | 2026-06-08 07:57:17.787026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27446 |
vulnerable | 2026-06-08 07:53:22.321558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.