seclists.org · May 31, 2026 17:04 UTC

oss-sec: CVE-2026-42253: Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties

Summary

Severity: important Affected versions: - Apache ActiveMQ (org.apache.activemq:apache-activemq) before 5.19.7 - Apache ActiveMQ (org.apache.activemq:apache-activ...

Original reporting

Open original source

Related coverage

Read full article on seclists.org

oss-sec: CVE-2026-42253: Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties

Original reporting

Related coverage

Apache ActiveMQ Jolokia access CVE disclosed

Apache ActiveMQ durable subscription disclosure CVE

Apache ActiveMQ CVE-2026-46605 authorization flaw

oss-sec: CVE-2026-45505: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector` Discovery Wrapper Bypass

oss-sec: CVE-2026-42588: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector