PT-2026-45377 · Apache · Activemq

Leon Johnson · CVE-2026-46605 · Published 2026-06-01 · Updated 2026-06-24

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.7 Apache ActiveMQ versions 6.0.0 through 6.2.5

Description Incomplete authorization in the server allows authenticated connections to remove existing destinations when they possess the proper permissions.

Recommendations Upgrade to version 5.19.7. Upgrade to version 6.2.6.

Exploit

Fix

DoS

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BIT-ACTIVEMQ-2026-46605

CVE-2026-46605

GHSA-CPW7-G3P5-QRFQ

OESA-2026-2723

OESA-2026-2724

OESA-2026-2725

Affected Products

Activemq

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46605.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-46605 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42253 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-49157 · Security Note
• https://ubuntu.com/security/CVE-2026-46605 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2723 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45505 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-46605 · Security Note
• https://osv.dev/vulnerability/BIT-activemq-2026-46605 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-49270 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42588 · Security Note
• https://lists.apache.org/thread/l4lxgr2s73g9pb218f180psfyskf8ldm · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46605 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-46605 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46605 · Vendor Advisory