CRITICALMaven

Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions

Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions

CVE-2026-27446Published 6 months agoUpdated 5 days agoSource: OSV

Affected packages

  • org.apache.activemq:artemis-server≥ 2.11.0
  • org.apache.artemis:artemis-server2.50.0 → 2.52.0

Exploit signal

Known exploited (CISA KEV)
No
EPSS score
EPSS percentile

EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.

Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions | HackTribune