Bleeping Computer

CISA flags Apache ActiveMQ flaw as actively exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on Thursday that a high-severity Apache ActiveMQ vulnerability patched earlier this month is now actively exploited in attacks.
Bleeping Computer

13-year-old bug in ActiveMQ lets hackers remotely execute commands

Security researchers discovered a remote code execution (RCE) vulnerability in Apache ActiveMQ Classic that has gone undetected for 13 years and could be exploited to execute arbitrary commands. The ...
Dark Reading

Attackers Target Max-Severity Apache ActiveMQ Bug to Drop Ransomware

More than 3,000 Internet-accessible Apache ActiveMQ Servers are exposed to a critical remote code execution vulnerability that an attacker has begun actively targeting to drop ransomware. The Apache ...
Golem

ActiveMQ Jolokia Code-Injection: Schwachstelle Message Broker

Die CISA hat am 16. April 2026 die Schwachstelle CVE-2026-34197 in Apache ActiveMQ in ihren Katalog Known Exploited Vulnerabilities (KEV) aufgenommen (öffnet im neuen Fenster). Eine KEV-Aufnahme ...
生物通

利用Jolokia实现远程代码执行：Apache ActiveMQ Artemis中CVE-2023-50780的网络安全分析

Java中间件平台通过Jolokia等HTTP可访问接口暴露强大的管理功能。本文通过将CVE-2023-50780在Apache ActiveMQ Artemis中的漏洞视为管理平面状态转换问题而非孤立的漏洞利用脚本集合，对该漏洞进行分析。