CVE-2026-49157Patch(apache / activemq)

MEDIUMCVSS 8.8 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch apache activemq systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Incorrect Default Permissions vulnerability in Apache ActiveMQ. This issue affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. The default Jolokia authorization settings granted non-admin (low-privilege) web-login accounts access to Jolokia operations which allowed executing broker management operations meant for admins such as addQueue and removeQueue. Users are recommended to upgrade to version 6.2.6 or 5.19.7, which fixes the issue.

apache CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-276

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

activemq

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
8 mentions across 7 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 4 signals
Technical details provided in 5 signals
General: 2 classified signals
Peaked 4d ago at 2 mentions (2026-06-03); latest day: 1
8 total mentions across 7 days

Affected systems

Vendors

apache

Products

activemq

Deep dive

Activity timeline8 mentions / 7d

Signal classification4 categories

Patch

450.0%

General

225.0%

Active Exploitation

112.5%

Disclosure

112.5%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-31	1	General1
2026-06-02	1	Patch1
2026-06-03	2	Active Exploitation1Patch1
2026-06-11	1	Disclosure1
2026-06-16	1	Patch1
2026-06-19	1	General1
2026-06-21	1	Patch1

Full discourse8 posts

CCB Alert@CCBalert135d
Patch
Warning: #Apache patched 3 vulnerabilities in Apache #ActiveMQ. CVE-2026-45505; CVSS:8.0, CVE-2026-49157; CVSS:8.8 & CVE-2026-42588; CVSS:8.1 may lead to high confidentiality, integrity and availability impact in affected versions. Time to #Patch #Patch #Patch
Post summary
The text announces that Apache has patched three ActiveMQ vulnerabilities, provides CVE identifiers and CVSS scores, and encourages users to apply the patches immediately.
01000215
7.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
General
CVE-2026-49157 CVE-2026-49157 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49157
Post summary
The content consists only of a CVE identifier and a link to a vulnerability details page, with no additional context on exploitation, patches, or technical specifics.
0100062
4.0K followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker117d
Patch
CVE-2026-49157 ApacheのActiveMQの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/14/cve-2026-49157-activemq/ #IT #Security #cybersecurity
Post summary
The linked article provides an explanation of CVE‑2026‑49157 in Apache ActiveMQ, covering its impact scope and recommended mitigations, but does not include PoC, exploit code, or evidence of active exploitation.
0000051
208 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker119d
General
CVE-2026-49157 ApacheのActiveMQの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/14/cve-2026-49157-activemq/ #IT #Security #cybersecurity
Post summary
The source is a general explanatory article about CVE‑2026‑49157 with a focus on impact and countermeasures, but it does not provide proof of exploitation, technical details, or explicit patch information.
0000050
209 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker121d
Patch
CVE-2026-49157 ApacheのActiveMQの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/14/cve-2026-49157-activemq/ #IT #Security #cybersecurity
Post summary
A blog article announces CVE-2026‑49157 in Apache ActiveMQ, offering an explanation of its scope and summarizing countermeasures, though it does not provide exploit code or evidence of active exploitation.
0000033
209 followersView on X
iototsecnews@iototsecnews126d
Disclosure
Apache ActiveMQ の脆弱性 CVE-2026-42253／49157 が FIX：セキュリティ・メカニズム回避の恐れ https://iototsecnews.jp/2026/06/03/critical-apache-activemq-vulnerability-exposes-systems-to-security-header-injection-attacks/ Apache ActiveMQ の脆弱性は、開発時の検証不足や設定が主な原因となっています。 CVE-2026-42253 は、MessageServlet が外部から入力された JMS メッセージプロパティの検証やサニタイズを行わずに、HTTP レスポンス・ヘッダーに対して、そのままコピーすることで発生します。また、脆弱性 CVE-2026-49157 は、 Jolokia のデフォルトの認可設定が過度に許容的であり、本来は権限のない低権限ユーザーに管理者操作を許しています。ご利用のチームは、ご注意ください。 #ActiveMQ #Apache #CVE202642253 #CVE202649157 #Vulnerability
Post summary
New Apache ActiveMQ vulnerabilities CVE-2026-42253 and CVE-2026-49157 are disclosed, detailing header injection and permission escalation issues, yet no PoC, exploit code, patch details, or evidence of active exploitation is mentioned.
0000088
497 followersView on X
ThreadLinqs@threadlinqs134d
Active Exploitation
NEW THREAT INTEL: Apache ActiveMQ - Jolokia priv-esc (CVE-2026-49157 CVSS 8.8) + HTTP header injection. 9 detections, 13 IOCs. https://intel.threadlinqs.com/threat/TL-2026-0675 #ThreatIntel #ActiveMQ https://t.co/hSDDhh0tOQ
Post summary
The tweet reports active exploitation of CVE-2026-49157 in Apache ActiveMQ via Jolokia privilege escalation, with 9 detections and 13 IOCs noted.
0000051
54 followersView on X
ThreadLinqs@threadlinqs134d
Patch
THREAT INTEL: Apache ActiveMQ - Jolokia default-perm flaw (CVE-2026-49157, CVSS 8.8) + HTTP header injection. Patch 5.19.7/6.2.6. https://intel.threadlinqs.com/threat/TL-2026-0675 #ThreatIntel https://t.co/jlzfNYTcKW
Post summary
The post is a threat‑intel alert highlighting a CVE-2026-49157 vulnerability in Apache ActiveMQ’s Jolokia component (CVSS 8.8) and recommends applying patch versions 5.19.7 or 6.2.6.
0000041
54 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	apache	activemq	-	-	-

Explore more

Back to dashboard apache CVEs activemq vulnerabilities

What researchers are saying

CVE-2026-49157

ThreadLinqs[verified]@threadlinqsActive Exploitation

The tweet reports active exploitation of CVE-2026-49157 in Apache ActiveMQ via Jolokia privilege escalation, with 9 detections and 13 IOCs noted.

ThreadLinqs[verified]@threadlinqsPatch

The post is a threat‑intel alert highlighting a CVE-2026-49157 vulnerability in Apache ActiveMQ’s Jolokia component (CVSS 8.8) and recommends applying patch versions 5.19.7 or 6.2.6.

CCB Alert@CCBalertPatch

The text announces that Apache has patched three ActiveMQ vulnerabilities, provides CVE identifiers and CVSS scores, and encourages users to apply the patches immediately.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The content consists only of a CVE identifier and a link to a vulnerability details page, with no additional context on exploitation, patches, or technical specifics.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerPatch

The linked article provides an explanation of CVE‑2026‑49157 in Apache ActiveMQ, covering its impact scope and recommended mitigations, but does not include PoC, exploit code, or evidence of active exploitation.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerGeneral

The source is a general explanatory article about CVE‑2026‑49157 with a focus on impact and countermeasures, but it does not provide proof of exploitation, technical details, or explicit patch information.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerPatch

A blog article announces CVE-2026‑49157 in Apache ActiveMQ, offering an explanation of its scope and summarizing countermeasures, though it does not provide exploit code or evidence of active exploitation.

iototsecnews@iototsecnewsDisclosure

New Apache ActiveMQ vulnerabilities CVE-2026-42253 and CVE-2026-49157 are disclosed, detailing header injection and permission escalation issues, yet no PoC, exploit code, patch details, or evidence of active exploitation is mentioned.