← CVE Intelligence

CVE-2026-49362

Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation PUBLISHED

Description (CNA)

An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized broker state manipulation and potential denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Artemisaffected 2.50.0 through 2.56.0
Apache Software Foundation / Apache ActiveMQ Artemisaffected 1.0.0 through 2.44.0

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.