CyberSIXT Search
Apache product

ActiveMQ

← All Apache products

No CISA KEV deadline is open. CISA last added an ActiveMQ CVE on 16 Apr.

Tracked since 26 Feb · latest article Tue 2 Jun · RSS

Added to KEV · 90 days
0
of 3 in the full CISA catalogue · all time
High exploit odds · current
1
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-34197ActiveMQ16 AprDeadline passed 30 Apr2 articles
CVE-2023-46604ActiveMQ2 Nov 2023Deadline passed 23 Nov 2023Known ransomware use · 1 article
CVE-2016-3088not in CyberSIXT coverageActiveMQ10 Feb 2022Deadline passed 10 Aug 2022

Coverage

4 articles · all timeFull timeline

4 articles from 4 outlets since 26 Feb; the latest 146 days ago.

ActiveMQ: coverage over time4 articles from 4 outlets. First report 26 Feb by The Hacker News. Busiest week: 2 articles, week of 6 Apr. 0 in the last 7 days. ActiveMQ: coverage over time4 articles from 4 outlets. First report 26 Feb by The Hacker News. Busiest week: 2 articles, week of 6 Apr. 0 in the last 7 days.
  • Article
  • First report
Show as table
ActiveMQ: articles
Published (UTC)OutletHeadline
Tue 2 Jun · 14:11 UTCSecurityOnlineActiveMQ bugs let attackers run code and bypass defences
Wed 8 Apr · 15:01 UTCSecurityWeekRCE Bug Lurked in Apache ActiveMQ Classic for 13 Years
Wed 8 Apr · 10:31 UTCInfosecurityAI powered tool finds decade old Apache ActiveMQ Classic RCE flaw
Thu 26 Feb · 16:32 UTCThe Hacker NewsKali Linux integrates Anthropic Claude AI to speed cyber attacks

Who reported 4 outlets, last 12 months

  • The Hacker News1
  • Infosecurity1
  • SecurityWeek1
  • SecurityOnline1
  1. ActiveMQ bugs let attackers run code and bypass defencesSecurityOnline
  2. RCE Bug Lurked in Apache ActiveMQ Classic for 13 YearsSecurityWeek
  3. AI powered tool finds decade old Apache ActiveMQ Classic RCE flawInfosecurity
  4. Kali Linux integrates Anthropic Claude AI to speed cyber attacksThe Hacker News

All CVEs in coverage

6
CVE-2023-46604Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityCVSS10.0CriticalExploited99.8%EPSS1article
CVE-2026-34197Apache ActiveMQ Improper Input Validation VulnerabilityCVSS8.8HighExploited98%EPSS2articles
CVE-2022-41678Apache Software Foundation Apache ActiveMQ vulnerabilityCVSSUnrated–Not in KEV86%EPSS1article
CVE-2024-32114Apache Software Foundation Apache ActiveMQ vulnerabilityCVSS8.5High–Not in KEV7.2%EPSS2articles
CVE-2026-42253Apache Software Foundation Apache ActiveMQ vulnerabilityCVSS6.1Medium–Not in KEV1.1%EPSS1article
CVE-2026-49157Apache Software Foundation Apache ActiveMQ vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device