Not scoredCWE-306
CVE-2026-57967
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 22 Oct
1.5%probability of exploitation in the next 30 days
Higher than 73% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Coverage 1 article · 1 outlet
- Apache Artemis Flaws Let Attackers Steal Sessions and Expose CredentialsSecurityOnline · first in our coverage · mentions it in passing