Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

A critical vulnerability (CVE-2026-34197) in Apache ActiveMQ is actively exploited and added to CISA's Known Exploited Vulnerabilities catalog.

• •Improper input validation enables arbitrary OS command execution through the Jolokia API
• •The flaw was hidden for 13 years and exploitable with default credentials (admin:admin)
• •Versions 6.0.0-6.1.1 support unauthenticated RCE due to CVE-2024-32114 exposing Jolokia
• •Users must upgrade to ActiveMQ 5.19.4 or 6.2.3 and restrict Jolokia endpoint access

This summary was automatically generated by AI based on the original article and may not be fully accurate.