VulnSocial

CVE-2026-53917Patch(apache / activemq)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apache activemq systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size value for the map. OpenWire message property maps are unmarshaled without size validation which can trigger OOM and crash the broker. This issue affects Apache ActiveMQ: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ All: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ Client: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ Broker: before 5.19.8, from 6.0.0 before 6.2.7. Users are recommended to upgrade to version 6.2.7 or 5.19.8, which fixes the issue.

apache CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-789

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • activemq
  • activemq_broker

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-07-03); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
apache
Products
activemqactivemq_broker

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-06-30: 1Mentions · 2026-07-03: 2Mentions · 2026-07-10: 1Patch / Workaround · 2026-07-03: 2Technical Details · 2026-07-03: 2Technical Details · 2026-07-10: 106-3007-0307-10
Signal classification3 categories
Patch
250.0%
General
125.0%
Disclosure
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-301
General1
2026-07-032
Patch2
2026-07-101
Disclosure1
Full discourse4 posts
  • iototsecnews@iototsecnews
    Disclosure

    Apache ActiveMQ の脆弱性 CVE-2026-53917／54475／49877 が FIX：DoS 攻撃やシステム・クラッシュの可能性 https://iototsecnews.jp/2026/07/03/multiple-apache-activemq-vulnerabilities-enable-dos-attacks-and-lead-to-crashes/ 今回の 3 件の深刻な脆弱性は、 Apache ActiveMQ の設計や設定に起因しています。 脆弱性 CVE-2026-53917 はメッセージのサイズ検証をしないメモリ割り当てに起因し、システム停止の恐れがあります。 CVE-2026-54475 はサーバ側のチェック不足が原因で、他の接続から一時的なデータが盗まれる危険性があります。 CVE-2026-49877 はデフォルトの設定ミスが原因で、低い権限のユーザーによる管理機能へのアクセスを許してしまいます。これらの問題は、検証の仕組みや、共有環境の分離、権限管理の不備から生じるものです。ご利用のチームは、ご注意ください。 #ActiveMQ #Apache #CVE202649877 #CVE202653917 #CVE202654475 #Vulnerability

    Post summary

    The Japanese article announces three critical Apache ActiveMQ vulnerabilities (CVE-2026-53917, CVE-2026-54475, CVE-2026-49877) that can cause DoS, data theft, and low‑privilege access, providing technical details but no PoC, exploit code, active exploitation claim, nor patch information.

    00000116
    500 followersView on X
  • TECHEPAGES@techepages
    Patch

    🚨 Three vulnerabilities disclosed in Apache ActiveMQ expose messaging infrastructure to DoS attacks, broken isolation, and unauthorized admin access. Patch now: 🔹 CVE-2026-53917: crafted OpenWire message can crash the broker (OOM) 🔹 CVE-2026-54475: connections can read others' temporary queues 🔹 CVE-2026-49877: low-priv users reach /admin/* in the Web Console 🔹 Fix: upgrade to 5.19.8 or 6.2.7

    Post summary

    Three CVEs were disclosed in Apache ActiveMQ, exposing DoS, isolation, and admin access weaknesses; users are advised to upgrade to v5.19.8 or v6.2.7.

    0000049
    23 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    Apache ActiveMQ users face critical vulnerabilities (CVE-2026-53917, CVE-2026-54475, CVE-2026-49877) leading to DoS attacks and unauthorized access. Immediate updates to versions 6.2.7 or 5.19.8 are essential to secure messaging infrastructures. #ApacheActiveMQ #CyberSecurity #DoS #Vulnerabilities #SecurityUpdate #Messaging https://thedailytechfeed.com/apache-activemq-vulnerabilities-expose-systems-to-dos-and-unauthorized-access/

    Post summary

    The post alerts that three critical CVEs in Apache ActiveMQ can cause DoS and unauthorized access, urging users to update to 6.2.7 or 5.19.8 immediately.

    0000064
    470 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-53917 CVE-2026-53917 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53917

    Post summary

    Only the CVE identifier and a generic link are supplied, lacking any deeper technical, exploit, or mitigation details.

    0000089
    4.1K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appapacheactivemq---
Appapacheactivemq_broker---

Explore more

Back to dashboardapache CVEsactivemq vulnerabilities