ActiveMQ
Security incidents tagged ActiveMQ. Newest first.
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 189
- Longest quiet run: 895 days (Nov 3–Apr 15)
Show 2 older incidents2 older incidents
April 2026 1
HighApache ActiveMQ: Apache ActiveMQ Improper Input Validation VulnerabilityPatched
Apache ActiveMQ Patched
Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. Added to CISA KEV on 2026-04-16.
Open incident →CVE-2026-34197
October 2023 1
CriticalApache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604)Patched
Apache ActiveMQ (Java OpenWire brokers and clients) Patched
A deserialization flaw in ActiveMQ's Java OpenWire protocol marshaller let anyone who could reach a broker run shell commands on it. Within days of the fix, attackers were deploying HelloKitty ransomware through it.
Open incident →CVE-2023-46604
1 ActiveMQ incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
