PT-2026-45377

CVE-2026-46605

·

Published

2026-06-01

·

Updated

2026-07-27

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.7 Apache ActiveMQ versions 6.0.0 through 6.2.5
Description Incomplete authorization in the server allows authenticated connections to remove existing destinations when they possess the proper permissions.
Recommendations Upgrade to version 5.19.7. Upgrade to version 6.2.6.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-285: Improper Authorization
Related identifiers
CVE-2026-46605
BDU:2026-12016
GHSA-CPW7-G3P5-QRFQ
BIT-ACTIVEMQ-2026-46605
OESA-2026-2723
OESA-2026-2724
OESA-2026-2725
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com