Dashboard / CVE-2026-34197

CVE-2026-34197

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: 2026-04-07 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.

CISA Known Exploited Vulnerability

Vendor / Product Apache — ActiveMQ
Date Added 2026-04-16
Remediation Due 2026-04-30
https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt ; https://nvd.nist.gov/vuln/detail/CVE-2026-34197

Weakness Classification (3)

Affected Software (4)

VendorProductVersion
apache activemq < 5.19.4
apache activemq 6.0.0 – 6.2.3
apache activemq_broker < 5.19.4
apache activemq_broker 6.0.0 – 6.2.3

References & Advisories (6)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

98.26%
Raw Score 0.982560
Percentile 99.9%
Date 2026-10-28

Intelligence Sources

kev ref →
nvd ref →

External Links