CVE-2026-34197
Apache ActiveMQ
Apache ActiveMQ Improper Input Validation Vulnerability
What it is
Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt
- nvd.nist.gov/vuln/detail/CVE-2026-34197
Description and required action as published by CISA. Full record at NVD.
Other Apache entries on the list
- Struts Apache Struts Command Injection Vulnerability CVE-2016-3081 · Oct 8, 2026
- Tomcat Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CVE-2026-34486 · Aug 4, 2026
- HTTP Server Apache HTTP Server Improper Escaping of Output Vulnerability CVE-2024-38475 · May 1, 2025
- Tomcat Apache Tomcat Path Equivalence Vulnerability CVE-2025-24813 · Apr 1, 2025
- OFBiz Apache OFBiz Forced Browsing Vulnerability CVE-2024-45195 · Feb 4, 2025
- HugeGraph-Server Apache HugeGraph-Server Improper Access Control Vulnerability CVE-2024-27348 · Sep 18, 2024