What is CVE-2026-54475?

CVE-2026-54475 is a high-severity vulnerability in Apache Software Foundation Activemq, classified under Missing Authorization. CVSS score: 7.5/10. Published 2026-06-30.

How severe is CVE-2026-54475?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Apache Software Foundation Activemq

CVE-2026-54475

Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to the connection that created them. The isolation can be brok…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Apache Software Foundation Activemq — versions 0, 6.0.0
Apache Software Foundation Activemq All — versions 0, 6.0.0
Apache Software Foundation Activemq Broker — versions 0, 6.0.0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

security@apache.org (vendor-advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2026-54475?: CVE-2026-54475 is a high-severity vulnerability in Apache Software Foundation Activemq, classified under Missing Authorization. CVSS score: 7.5/10. Published 2026-06-30.
How severe is CVE-2026-54475?: High severity. CVSS v3 base score is 7.5 out of 10.