CVE-2026-75880

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0

Description An authenticated client can attach a consumer using a selector with crafted wildcard usage. This causes excessive evaluation during message delivery attempts, which occupies a shared broker thread and results in a denial of service.

Recommendations Upgrade Apache Artemis to version 2.57.0. Upgrade Apache ActiveMQ Artemis to version 2.57.0.