CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 6927

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

CVE-2026-67593 affects Apache Artemis and Apache ActiveMQ Artemis across multiple versions, allowing pre-authentication deletion of queues through improper Openwire protocol handling. The vulnerability is rated as important severity and impacts versions 2.50.0 through 2.56.0 of Artemis and 1.0.0 through 2.44.0 of ActiveMQ Artemis.

Why it matters: Organizations running vulnerable versions of Apache Artemis or ActiveMQ Artemis must patch immediately to prevent unauthenticated attackers from deleting critical message queues, which could disrupt application messaging and cause data loss.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

A vulnerability in Apache Artemis and Apache ActiveMQ Artemis versions 2.50.0 through 2.56.0 (Artemis) and 1.0.0 through 2.44.0 (ActiveMQ Artemis) allows pre-authentication queue deletion through improper Openwire protocol handling. The flaw affects multiple Jakarta and non-Jakarta variants of the affected libraries.

Why it matters: Organizations running vulnerable versions of Apache Artemis or Apache ActiveMQ Artemis face denial of service risk from unauthenticated attackers who can delete message queues; patching to fixed versions is required.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary