https://pwn.watch/t/activemq Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 16 Apr 2026 00:00:00 GMT https://pwn.watch/i/apache-activemq-cve-2026-34197 https://pwn.watch/i/apache-activemq-cve-2026-34197 Thu, 16 Apr 2026 00:00:00 GMT high <p>Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. Added to CISA KEV on 2026-04-16.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2026-04-16: CISA added CVE-2026-34197 to the KEV catalog (due 2026-04-30).</li></ul> <p><strong>CVEs:</strong> CVE-2026-34197</p> https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 Thu, 02 Nov 2023 00:00:00 GMT critical <p>A deserialization flaw in ActiveMQ's Java OpenWire protocol marshaller let anyone who could reach a broker run shell commands on it. Within days of the fix, attackers were deploying HelloKitty ransomware through it.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> 5.15.16, 5.16.7, 5.17.6, 5.18.3</p> <p><strong>Latest updates:</strong></p><ul><li>2023-11-02: CISA adds CVE-2023-46604 to the KEV catalog</li><li>2023-11-01: Rapid7 reports exploitation in two customer environments, attempting to deploy HelloKitty ransomware (<a href="https://www.rapid7.com/blog/post/2023/11/01/etr-suspected-exploitation-of-apache-activemq-cve-2023-46604/">source</a>)</li><li>2023-10-27: Apache publishes the CVE-2023-46604 announcement; fixed releases already out (<a href="https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2023-46604</p>