CVE-2026-57822: Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service

As cited

Copy frozen at 2026-09-10 04:52 UTC (site build).

vulnerabilities

CVE-2026-57822: Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service

CVE-2026-57822 affects Apache Artemis and Apache ActiveMQ Artemis when brokers process message-based management requests from authenticated clients with MANAGE permission. The vulnerability exists in parameter deserialization and can lead to denial of service. Multiple versions of both projects are impacted, ranging from 2.50.0 through 2.56.0 for Artemis and 1.3.0 through 2.44.0 for ActiveMQ Artemis.

Why it matters: Organizations running affected versions of Apache Artemis or ActiveMQ Artemis with message-based management enabled should assess their exposure to denial of service attacks from authenticated, authorized clients and plan patching accordingly.

Source published

2026-09-10 00:44 UTC

First seen by Cybersecurity Tracker

2026-09-10 04:31 UTC