CVE-2026-49434— Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker
Quick assessment
Affected
Apache Software Foundation Apache ActiveMQ Broker
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache ActiveMQ是Apache基金会的一款消息队列中间件。 Apache ActiveMQ存在输入验证错误漏洞，该漏洞源于输入验证不当，可能导致能够发布或修改LDAP条目的攻击者在代理JVM内部实例化被拒绝的传输，用于获取攻击者URL并在同一JVM中生成第二个BrokerService。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache ActiveMQ | < 5.19.8 |
affected |
6.0.0< 6.2.7 |
affected | ||
| Apache Software Foundation | Apache ActiveMQ All | < 5.19.8 |
affected |
6.0.0< 6.2.7 |
affected | ||
| Apache Software Foundation | Apache ActiveMQ Broker | < 5.19.8 |
affected |
6.0.0< 6.2.7 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-49434
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.
An attacker that has access to publish or modify entries in LDAP that match the configured searchBase and searchFilter can instantiate denied transports inside the broker JVM. This can be used to fetch an attacker URL and spawn a second BrokerService inside the same JVM.
This issue affects Apache ActiveMQ Broker: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ All: before 5.19.8, from 6.0.0 before 6.2.7.
Users are recommended to upgrade to version 6.2.7 or 5.19.8, which fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Apache ActiveMQ 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache ActiveMQ是Apache基金会的一款消息队列中间件。 Apache ActiveMQ存在输入验证错误漏洞，该漏洞源于输入验证不当，可能导致能够发布或修改LDAP条目的攻击者在代理JVM内部实例化被拒绝的传输，用于获取攻击者URL并在同一JVM中生成第二个BrokerService。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache ActiveMQ Broker | 0 ~ 5.19.8 | - |
|
| Apache Software Foundation | Apache ActiveMQ | 0 ~ 5.19.8 | - |
|
| Apache Software Foundation | Apache ActiveMQ All | 0 ~ 5.19.8 | - |
|
II. Public POCs for CVE-2026-49434
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-49434
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-49434 (1)
Same Patch Batch · Apache Software Foundation · 2026-06-30 · 10 CVEs total
| CVE-2026-54475 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination owners | |
| CVE-2026-53917 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbo | |
| CVE-2026-53916 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in ST | |
| CVE-2026-52760 | Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ | |
| CVE-2026-50750 | Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire | |
| CVE-2026-50734 | Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire | |
| CVE-2026-49877 | Apache ActiveMQ: Authenticated web users retain admin access by default in the Web Console | |
| CVE-2026-49432 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length | |
| CVE-2025-53648 | Apache Gravitino: SQL misconfiguration can access or truncate files |
IV. Related Vulnerabilities
Same product: Apache ActiveMQ Broker
-
CVE-2026-61487
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ -
CVE-2026-50750
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All -
CVE-2026-54475
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ -
CVE-2026-42588
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ -
CVE-2026-45505
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ
Same vendor: Apache Software Foundation
-
CVE-2026-59654
Apache CloudStack: DoS caused by database connections leak -
CVE-2026-63046
Apache InLong: Agent Installer — Command Injection to RCE vi -
CVE-2026-47359
Apache CloudStack: OS Command Injection due to unsanitized m -
CVE-2026-50112
Apache CloudStack: RCE and SSRF in direct download, metalink -
CVE-2026-50222
Apache CloudStack: Improper access control in Userdata refer
Same weakness: CWE-20
-
CVE-2026-7808
justhtml before 1.16.0 Multiple Security Issues via Sanitiza -
CVE-2026-5388
justhtml before 1.15.0 Multiple Security Issues -
CVE-2026-2996
Advanced Product Fields (Product Addons) for WooCommerce <= -
CVE-2026-53541
OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypas -
CVE-2026-63421
Keystone: `graphql.maxTake` bypass with negative `take`
V. Comments for CVE-2026-49434
No comments yet