Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-46605

Опубликовано: 01 июн. 2026
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions.

This issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6.

Users are recommended to upgrade to version v6.2.6 or v5.19.7, which fixes the issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
Версия до 5.19.7 (исключая)
cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
Версия от 6.0.0 (включая) до 6.2.6 (исключая)
cpe:2.3:a:apache:activemq_broker:*:*:*:*:*:*:*:*
Версия до 5.19.7 (исключая)
cpe:2.3:a:apache:activemq_broker:*:*:*:*:*:*:*:*
Версия от 6.0.0 (включая) до 6.2.6 (исключая)

EPSS

Процентиль: 26%
0.00335
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

ubuntu логотип

CVE-2026-46605

CVSS3: 4.3
ubuntu
2 месяца назад

Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions. This issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. Users are recommended to upgrade to version v6.2.6 or v5.19.7, which fixes the issue.

redhat логотип

CVE-2026-46605

CVSS3: 6.5
redhat
2 месяца назад

Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions. This issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. Users are recommended to upgrade to version v6.2.6 or v5.19.7, which fixes the issue.

debian логотип

CVE-2026-46605

CVSS3: 4.3
debian
2 месяца назад

Incomplete authorization by Apache ActiveMQ server before versions v6. ...

github логотип

GHSA-cpw7-g3p5-qrfq

CVSS3: 4.3
github
2 месяца назад

Incomplete authorization by Apache ActiveMQ server before versions v6.2.6 and v5.19.7 allows authenticated connections to remove existing destinations with proper permissions. This issue affects Apache ActiveMQ Broker: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ All: before 5.19.7, from 6.0.0 before 6.2.6; Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. Users are recommended to upgrade to version v6.2.6 or v5.19.7, which fixes the issue.

EPSS

Процентиль: 26%
0.00335
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285