PT-2026-34865 · Apache · Apache Activemq+4

Fatih Ersinadim + 1 · Published 2026-04-24 · Updated 2026-04-26 · CVE-2026-40466

X.com · Cvenew

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2026-40466 Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.

… https://t.co/r9m51IxqPs

Fix

RCE

Code Injection

Weakness Enumeration

CWE-20

CWE-94

Related Identifiers

CVE-2026-40466

Affected Products

Apache Activemq

Apache Activemq Apollo

Apache Activemq Broker

Activemq

Activemq Broker

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-40466 · Security Note
• https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt · Vendor Advisory
• https://twitter.com/fofabot/status/2047533758136594706 · Twitter Post
• https://twitter.com/UpwindMDR/status/2048432689393303628 · Twitter Post
• https://twitter.com/CVEnew/status/2048099300790460521 · Twitter Post