https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:08:23.542466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-activemq-2021-26117 BIT-activemq-2021-26117 — ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind 2026-10-04T07:08:23.658345+00:00

Affected: Bitnami: activemq

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.

 https://cve.radiocsirt.org/vuln/cnvd-2021-20281 cnvd-2021-20281 2026-10-04T07:08:23.658407+00:00 cnvd-2021-20281 https://cve.radiocsirt.org/vuln/euvd-2026-24971 EUVD-2026-24971 2026-10-04T07:08:23.658425+00:00 EUVD-2026-24971 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26117 fkie_cve-2021-26117 2026-10-04T07:08:23.658437+00:00

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.

 https://cve.radiocsirt.org/vuln/ghsa-9mgm-gcq8-86wq GHSA-9mgm-gcq8-86wq — Improper Authentication in Apache ActiveMQ and Apache Artemis 2026-10-04T07:08:23.658461+00:00

Affected: Maven: org.apache.activemq:activemq-parent, Maven: org.apache.activemq:apache-artemis

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.

 https://cve.radiocsirt.org/vuln/gsd-2021-26117 gsd-2021-26117 2026-10-04T07:08:23.658486+00:00 gsd-2021-26117 https://cve.radiocsirt.org/vuln/rhsa-2020:4154 RHSA-2020:4154 — Red Hat Security Advisory: Red Hat AMQ Broker 7.4.5 release and security update 2026-10-04T07:08:23.658498+00:00

Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ hawtio: server side request forgery via initial /proxy/ substring of a URI activemq: LDAP authentication bypass with anonymous bind

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26117 UBUNTU-CVE-2021-26117 2026-10-04T07:08:23.658519+00:00

Affected: Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1807 WID-SEC-W-2023-1807 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-04T07:08:23.658541+00:00

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.