CVE-2026-34197: Apache ActiveMQ Jolokia API Remote Code Execution

Дата публикации: 24-08-2026 08:07:46

Apache ActiveMQ Classic contains a high-impact vulnerability that affects versions before 5.19.4 and versions 6.0.0 through 6.2.2. An authenticated user can misuse Jolokia, the web console’s management interface, to monitor and control the broker, which functions as the central messaging service. By submitting specially crafted URIs, an attacker can abuse broker management functions to execute malicious commands and potentially achieve remote code execution. This vulnerability has been assigned CVE-2026-34197. More details about affected versions and references are available at NVD.
Apache ActiveMQ Classic is a Java Message Service (JMS)-based broker that supports asynchronous publish/subscribe and queue-based messaging. Producers send messages to the broker, while consumers receive them through topics or queues.
This article analyzes CVE-2026-34197, the vulnerable code path, affected versions, and detection considerations.

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	CVE-2026-34486: Apache Tomcat Tribes Unauthenticated RCE	0	7.47	25-08-2026
2	CVE-2026-64607: Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS	0	7.41	13-08-2026
3	CVE-2026-17431: PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for	0	11.54	13-08-2026
4	GitLab Patches Critical CVE-2026-19478 GraphQL Vulnerability	0	6.97	19-08-2026
5	Critical NGINX Vulnerability CVE-2026-42945: What Linux Admins Should Check Now	-5	7	18-05-2026
6	Oracle Security Alert Advisory - CVE-2026-35273	0	10	11-06-2026
7	Fixes available for CVE-2026-31431 (Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability	0	7.84	01-05-2026
8	Critical TeamCity Flaw Could Let Unauthenticated Attackers Execute Server Commands	0	4.71	28-07-2026
9	Security advisory: CVE-2026-9740 and CVE-2026-11933 in Percona Server for MongoDB	0	6.55	17-06-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 9. Тональность: 0. Информативность: 10.34. Источник: community.hpe.com.