CVE-2026-108946

Vendor

Apache Software Foundation

Product

Apache ActiveMQ, ActiveMQ Broker

Weakness

CWE-20

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   CVE NVD 2h ago

   Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB.

   Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. The ActiveMQ broker resolves connection, session and consumer state from ids that are user provided and in some scenarios does not validate that…

   Fix available CVE-2026-108946 Apache Software Foundation