CVE-2026-57967— Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
Quick assessment
Affected
Apache Software Foundation Apache Artemis
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache Artemis是美国Apache基金会开源的一款支持多种消息协议的高性能消息代理软件。 Apache Artemis 2.50.0版本至2.56.0版本和Apache ActiveMQ Artemis 1.0.0版本至2.44.0版本存在授权问题漏洞，该漏洞源于未认证的远程攻击者可构造CORE协议SESSION_REATTACH数据包窃取现有会话，并冒充先前已认证的会话继续执行。
In-the-Wild Activity Observed
github_trending · low
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-MiddleAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache ActiveMQ Artemis | 1.0.0≤ 2.44.0 |
affected |
| Apache Software Foundation | Apache Artemis | 2.50.0≤ 2.56.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-57967
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
Source: CVE Program / CVE List V5
Vulnerability Description
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Artemis 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Artemis是美国Apache基金会开源的一款支持多种消息协议的高性能消息代理软件。 Apache Artemis 2.50.0版本至2.56.0版本和Apache ActiveMQ Artemis 1.0.0版本至2.44.0版本存在授权问题漏洞，该漏洞源于未认证的远程攻击者可构造CORE协议SESSION_REATTACH数据包窃取现有会话，并冒充先前已认证的会话继续执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Artemis | 2.50.0 ~ 2.56.0 | - |
|
| Apache Software Foundation | Apache ActiveMQ Artemis | 1.0.0 ~ 2.44.0 | - |
|
II. Public POCs for CVE-2026-57967
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-57967
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-57967 (1)
Same Patch Batch · Apache Software Foundation · 2026-09-10 · 11 CVEs total
| CVE-2026-80354 | Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secr | |
| CVE-2026-80351 | Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod | |
| CVE-2026-80352 | Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author appl | |
| CVE-2026-84939 | Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path trave | |
| CVE-2026-49362 | Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler A | |
| CVE-2026-49363 | Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE | |
| CVE-2026-49364 | Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Auth | |
| CVE-2026-57822 | Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserializatio | |
| CVE-2026-67593 | Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-auth | |
| CVE-2026-75880 | Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to |
IV. Related Vulnerabilities
Same product: Apache Artemis
-
CVE-2026-49362
Apache Artemis, Apache ActiveMQ Artemis: Missing Authenticat -
CVE-2026-49363
Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication -
CVE-2026-49364
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apa -
CVE-2026-57822
Apache Artemis, Apache ActiveMQ Artemis: Message-based manag -
CVE-2026-67593
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apa
Same vendor: Apache Software Foundation
-
CVE-2026-108743
Apache Kylin: spark job OS command injection -
CVE-2026-108709
Apache Kylin: Unauthenticated Metadata Broadcast (inside in- -
CVE-2026-69080
Apache Kylin: Broken Access Control in QuerySQLBlacklistCont -
CVE-2026-69077
Apache Kylin: JobController allows unauthorized cross-projec -
CVE-2026-69076
Apache Kylin: Unauthorized cross-project job discard
Same weakness: CWE-306
-
CVE-2026-111719
Roncoo-pay through commit 9428382 Information Disclosure via -
CVE-2026-111706
99AI through 4.3.0 Unauthenticated Information Disclosure vi -
CVE-2026-111704
LangChat through commit 2a6285a Missing Authentication on RE -
CVE-2026-111701
OtterMind Nubase through 0.1.4 Missing Authentication in Sto -
CVE-2026-111699
Niefy wx-api through 0.8.2 Authentication Bypass via Unverif
V. Comments for CVE-2026-57967
No comments yet