Advisories · nist.gov

CVE-2026-67593

nist.gov

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.

More from nist.gov

CVE-2026-0306nist.govCVE-2026-0307nist.govCVE-2026-0308nist.govCVE-2026-0305nist.govCVE-2026-49363nist.govCVE-2026-49364nist.gov

Also in Advisories

  1. Friday Squid Blogging: Rotting Squid on a Beached California BoatBruce Schneierschneier.com
  2. My Talk at DEF CONBruce Schneierschneier.com
  3. Cliff Stoll’s DEF CON TalkBruce Schneierschneier.com
  4. AIs Compress Exploit TimelineBruce Schneierschneier.com
  5. Revised Medical Criteria for Evaluating Cardiovascular Disordersfederalregister.gov
  6. Continuation of the National Emergency With Respect to Persons Who Commit, Threaten To Commit, or Support Terrorismfederalregister.gov