Advisories · nist.gov

CVE-2026-49362

nist.gov

An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.

More from nist.gov

CVE-2026-0306nist.govCVE-2026-0307nist.govCVE-2026-0308nist.govCVE-2026-0305nist.govCVE-2026-49363nist.govCVE-2026-49364nist.gov

Also in Advisories

  1. Friday Squid Blogging: Rotting Squid on a Beached California BoatBruce Schneierschneier.com
  2. My Talk at DEF CONBruce Schneierschneier.com
  3. Cliff Stoll’s DEF CON TalkBruce Schneierschneier.com
  4. AIs Compress Exploit TimelineBruce Schneierschneier.com
  5. Revised Medical Criteria for Evaluating Cardiovascular Disordersfederalregister.gov
  6. Continuation of the National Emergency With Respect to Persons Who Commit, Threaten To Commit, or Support Terrorismfederalregister.gov