Mastodawn

JVNDB-2026-017541:Apache Software FoundationのApache ActiveMQ Artemis等の複数製品における不正な認証に関する脆弱性
https://atlas.whatip.xyz/post.php?slug=jvndb-2026-017541apache-software-foundationapache-activemq-artemis
Breaking: <p>Apache
#foundation #software #activemq #artemis

JVNDB-2026-017541:Apache Software FoundationのApache ActiveMQ Artemis等の複数製品における不正な認証に関する脆弱性

Apache Artemisには、STOMPプロトコルを使用し、アドレスに対してconsumeまたはsendの権限を持つセキュリティ資格情報を用いるアプリケーションにおいて、該当ユーザーが特定のアドレスに対するcreateAddress権限を持っていなくても、そのアドレスがサポートするルーティングタイプを拡張できてしまうという脆弱性があります。ユーザーは、本来拒否されるべきルーティングタイプの変…...

Habr May 22

Майский «В тренде VM»: громкие уязвимости в Linux, ActiveMQ, SharePoint и Acrobat Reader

Хабр, привет! На связи Александр Леонов, ведущий эксперт PT Expert Security Center и дежурный по самым опасным уязвимостям месяца. Мы с командой аналитиков Positive Technologies регулярно смотрим на поток информации об уязвимостях из самых разных источников: бюллетени безопасности вендоров, соцсети, блоги, телеграм-каналы, репозитории кода, базы уязвимостей и эксплойтов. Из этого многообразия мы стараемся выделять самое важное - трендовые уязвимости, которые уже используются в реальных атаках или с высокой вероятностью будут эксплуатироваться в ближайшее время. С прошлого дайджеста мы добавили в общий список еще четыре трендовые уязвимости.

https://habr.com/ru/companies/pt/articles/1038038/

#activemq #sharepoint #acrobat_reader #adobe_acrobat #уязвимости_и_их_эксплуатация

Майский «В тренде VM»: громкие уязвимости в Linux, ActiveMQ, SharePoint и Acrobat Reader

Хабр

The New Oil Apr 22

Actively exploited #Apache #ActiveMQ flaw impacts 6,400 servers

https://www.bleepingcomputer.com/news/security/actively-exploited-apache-activemq-flaw-impacts-6-400-servers/

#cybersecurity

Actively exploited Apache ActiveMQ flaw impacts 6,400 servers

Nonprofit security organization Shadowserver found that over 6,400 Apache ActiveMQ servers exposed online are vulnerable to ongoing attacks exploiting a high-severity code injection vulnerability.

BleepingComputer

The New Oil Apr 19

#CISA flags #Apache #ActiveMQ flaw as actively exploited in attacks

https://www.bleepingcomputer.com/news/security/cisa-flags-apache-activemq-flaw-as-actively-exploited-in-attacks/

#cybersecurity

CISA flags Apache ActiveMQ flaw as actively exploited in attacks

CISA warned that attackers are now exploiting a high-severity Apache ActiveMQ vulnerability, which was patched earlier this month after going undetected for 13 years.

BleepingComputer

TugaTech 🖥️Apr 17

Ataque crítico ao Apache ActiveMQ ameaça milhares de servidores com um detalhe inesperado na descoberta
🔗 https://tugatech.com.pt/t82128-ataque-critico-ao-apache-activemq-ameaca-milhares-de-servidores-com-um-detalhe-inesperado-na-descoberta

#activemq #apache #ataque #descoberta #detalhe

Ataque crítico ao Apache ActiveMQ ameaça milhares de servidores com um detalhe inesperado na descoberta

A agência de cibersegurança norte-americana (CISA) emitiu um aviso urgente sobre uma vulnerabilidade de gravidade elevada no Apache ActiveMQ, que está a ser ati

TugaTech

OffSequence Apr 17

CRITICAL: Apache ActiveMQ RCE vuln (CVE-2026-34197) disclosed. No patch yet — review your security posture & monitor vendor channels for updates. Remote attackers could fully compromise systems. https://radar.offseq.com/threat/recent-apache-activemq-vulnerability-exploited-in--98176e07 #OffSeq #ActiveMQ #Vuln #InfoSec

securityaffairs Apr 17

U.S. CISA adds a flaw in #Apache #ActiveMQ to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/190917/security/u-s-cisa-adds-a-flaw-in-apache-activemq-to-its-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking

U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog

The U.S. CISA adds a vulnerability (CVE-2026-34197) in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog

Security Affairs

TugaTech 🖥️Apr 14

Apache ActiveMQ esconde falha crítica há 13 anos e a solução surgiu de onde menos se esperava
🔗 https://tugatech.com.pt/t81772-apache-activemq-esconde-falha-critica-ha-13-anos-e-a-solucao-surgiu-de-onde-menos-se-esperava

#activemq #apache #falha

Apache ActiveMQ esconde falha crítica há 13 anos e a solução surgiu de onde menos se esperava

Investigadores de segurança revelaram a existência de uma vulnerabilidade de execução remota de código no Apache ActiveMQ Classic que passou completamente despe

TugaTech

The New Oil Apr 9

13-year-old bug in #ActiveMQ lets hackers remotely execute commands

https://www.bleepingcomputer.com/news/security/13-year-old-bug-in-activemq-lets-hackers-remotely-execute-commands/

#cybersecurity #Apache

13-year-old bug in ActiveMQ lets hackers remotely execute commands

Security researchers discovered a remote code execution (RCE) vulnerability in Apache ActiveMQ Classic that has gone undetected for 13 years and could be exploited to execute arbitrary commands.

BleepingComputer