Biswajeet Ray🇮🇳@BiswajeetRay7
General
Thanks for sharing about CVE-2026-52760
Post summary
The message only thanks someone for sharing information about CVE-2026-52760, with no additional details.
0000067
612 followersView on X
CVE-2026-52760General(apache / activemq)
LOWCVSS 6.1 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache ActiveMQ, Apache ActiveMQ Web Console. The browse page in the web console renders a message Id directly without sanitization. This allows an authenticated producer to send a message with a JMS message ID that has been crafted to contain HTML/JavaScript such that when an administrator browses the queue in the Web Console, the payload executes in their browser. This issue affects Apache ActiveMQ: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ Web Console: before 5.19.8, from 6.0.0 before 6.2.7. Users are recommended to upgrade to version 6.2.7 or 5.19.8, which fixes the issue.
0.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
Weakness type (CWE)
CWE-79
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- activemq
- activemq_web
Threat summary
- 1 mentions across 1 observed day
What's happening
- General: 1 classified signal
- 1 total mentions across 1 day
Affected systems
Vendors
Products
activemqactivemq_web
Deep dive
Activity timeline1 mentions / 1d
Signal classification1 categories
General1100.0%
Full discourse1 post
CPE platform detail2 entries
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | activemq | - | - | - |
| App | apache | activemq_web | - | - | - |