PT-2026-53846

CVE-2026-54475

Published

2026-06-30

Updated

2026-11-03

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.8 Apache ActiveMQ versions 6.0.0 through 6.2.6

Description An authorization flaw exists in the handling of temporary destinations. While these destinations are intended to be isolated to the connection that created them, the isolation check is only performed on the client side. This allows a different connection to consume messages from another connection's temporary destination.

Recommendations Upgrade to version 6.2.7.

Exploitability

Exploit

Fix

Impacts

Researchers

Leon Johnson

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers