Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-74761

Опубликовано: 09 сент. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms.

An authenticated client can spoof clientId when removing a durable topic subscription.

This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2.

Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
Версия до 5.19.11 (исключая)
cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
Версия от 6.0.0 (включая) до 6.3.2 (исключая)
cpe:2.3:a:apache:activemq_all:*:*:*:*:*:*:*:*
Версия до 5.19.11 (исключая)
cpe:2.3:a:apache:activemq_all:*:*:*:*:*:*:*:*
Версия от 6.0.0 (включая) до 6.3.2 (исключая)
cpe:2.3:a:apache:activemq_broker:*:*:*:*:*:*:*:*
Версия до 5.19.11 (исключая)
cpe:2.3:a:apache:activemq_broker:*:*:*:*:*:*:*:*
Версия от 6.2.0 (включая) до 6.3.2 (исключая)

EPSS

Процентиль: 50%
0.00623
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

ubuntu логотип

CVE-2026-74761

CVSS3: 7.5
ubuntu
2 месяца назад

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2. Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.

redhat логотип

CVE-2026-74761

CVSS3: 6.3
redhat
2 месяца назад

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2. Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.

redos логотип

ROS-20261103-80-0101

CVSS3: 7.5
redos
8 дней назад

Уязвимость apache-activemq

redos логотип

ROS-20261103-73-0102

CVSS3: 7.5
redos
8 дней назад

Уязвимость apache-activemq

github логотип

GHSA-hx9m-72qj-2q46

CVSS3: 7.5
github
2 месяца назад

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2. Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.

EPSS

Процентиль: 50%
0.00623
Низкий

7.5 High

CVSS3

Дефекты

CWE-20