As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-49364: Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers
CVE-2026-49364 affects Apache Artemis and Apache ActiveMQ Artemis versions 2.50.0 through 2.56.0 and 1.0.0 through 2.44.0 respectively, allowing unauthenticated network-adjacent attackers to access cluster credentials before authentication is established. The vulnerability carries important severity and impacts both the core client and server components of these message broker platforms.
Why it matters: Organizations running affected Artemis or ActiveMQ Artemis versions need to patch immediately, as cluster credentials can be exposed to peers on the network without authentication, potentially enabling lateral movement and cluster compromise.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-49364: Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-49364: Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers
CVE-2026-49364 affects Apache Artemis and Apache ActiveMQ Artemis versions 2.50.0 through 2.56.0 and 1.0.0 through 2.44.0 respectively. An unauthenticated network-adjacent attacker can expose pre-authentication cluster credentials to discovered peers in these products.
Why it matters: Organizations running Artemis or ActiveMQ Artemis in clustered deployments need to assess whether they are on affected versions and apply patches to prevent credential disclosure to adjacent network attackers.
- Source published
- First seen by Cybersecurity Tracker