PT-2026-53842 · Apache · Apache Activemq+2

Publicado 2026-06-30 · Atualizado 2026-06-30 · CVE-2026-50750

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.

Following the fix for CVE-2026-49270 an unauthenticated attacker can now cause broker OOM by sending an repeated BrokerInfo commands without sending a ConnectionInfo, until the broker will crash with OOM. This issue affects Apache ActiveMQ Broker: from 5.19.7 before 5.19.8, from 6.2.6 before 6.2.7; Apache ActiveMQ: from 5.19.7 before 5.19.8, from 6.2.6 before 6.2.7; Apache ActiveMQ All: from 5.19.7 before 5.19.8, from 6.2.6 before 6.2.7.

Users are recommended to upgrade to version 6.2.7, which fixes the issue.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2026-50750

Produtos afetados

Apache Activemq

Apache Activemq Apollo

Apache Activemq Broker

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-50750 · Nota de Segurança
• https://lists.apache.org/thread/nhkmbdym61yp6wwy0dny8w1p46sm87kr · Aviso do Fabricante