Class familyApache · ActiveMQ
Apache ActiveMQ input validation flaws, 2016–2026
3 ActiveMQ CVEs with CWE-20 weaknesses, 1 Jun 2016 to 24 Apr 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2016’16
2017’17
2018’18
2019’19
2020’20
2021’21
2022’22
2023’23
2024’24
2025’25
2 2026’26
In CISA KEVNot in KEV
20161 CVE, 1 in KEV
20262 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2016-3088KEV | 1 Jun 2016 | Apache ActiveMQ Improper Input Validation Vulnerability · fixed in 5.14.0 | Grouped by weakness | 86.0 |
| CVE-2026-34197KEV | 7 Apr 2026 | Apache ActiveMQ Improper Input Validation Vulnerability · fixed in 6.2.3 | Grouped by weakness | 74.1 |
| CVE-2026-41044 | 24 Apr 2026 | Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView… · fixed in 6.2.5 | Grouped by weakness | 18.6 |