GHSA-fw88-pf9m-p947
NoneCVSS
—
EPSS
—
Published
Mar 4, 2026
CISA due date
—
The record
Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.activemq:artemis-server | 2.11.0 | No fix |
| Maven | org.apache.artemis:artemis-server | 2.50.0 | 2.52.0 |
Related vulnerabilities
- CVE-2026-27446 Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis… Same vulnerability
- CVE-2022-35278 In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content… Also affects org.apache.activemq:artemis-server
- CVE-2026-114636 Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes… CWE-306
- CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. CWE-306
- CVE-2026-53714 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or… CWE-306
- CVE-2026-89261 MoguBlog through 6.2 exposes Elasticsearch index management endpoints in the mogu_search… CWE-306
- CVE-2026-89250 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an… CWE-306
- CVE-2026-89176 WeenyGenius, a computer lab management system developed by Howyar Technologies, has a… CWE-306