https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:07:19.850904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07372 bdu:2023-07372 2026-10-02T16:07:19.871260+00:00 bdu:2023-07372 https://cve.radiocsirt.org/vuln/bit-activemq-2023-46604 BIT-activemq-2023-46604 — Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to… 2026-10-02T16:07:19.871305+00:00

Affected: Bitnami: activemq

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.

Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0919 certfr-2023-avi-0919 — Une vulnérabilité a été découverte dans <span class="textit">les produits SolarWinds</span>. Elle permet à un attaquant… 2026-10-02T16:07:19.871342+00:00 certfr-2023-avi-0919 https://cve.radiocsirt.org/vuln/cnvd-2023-94073 cnvd-2023-94073 2026-10-02T16:07:19.871358+00:00 cnvd-2023-94073 https://cve.radiocsirt.org/vuln/euvd-2026-258476 EUVD-2026-258476 2026-10-02T16:07:19.871369+00:00 EUVD-2026-258476 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46604 fkie_cve-2023-46604 2026-10-02T16:07:19.871379+00:00

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.

Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-crg9-44h2-xw35 GHSA-crg9-44h2-xw35 — Apache ActiveMQ is vulnerable to Remote Code Execution 2026-10-02T16:07:19.871402+00:00

Affected: Maven: org.apache.activemq:activemq-client, Maven: org.apache.activemq:activemq-openwire-legacy

Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.

Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-46604 gsd-2023-46604 2026-10-02T16:07:19.871429+00:00 gsd-2023-46604 https://cve.radiocsirt.org/vuln/icsa-24-130-03 ICSA-24-130-03 — Delta Electronics InfraSuite Device Master 2026-10-02T16:07:19.871440+00:00

Delta Electronics InfraSuite Device Master contains a deserialization of untrusted data vulnerability because it runs a version of Apache ActiveMQ (5.15.2) which is vulnerable to CVE-2023-46604.

 https://cve.radiocsirt.org/vuln/oesa-2023-1778 OESA-2023-1778 — activemq security update 2026-10-02T16:07:19.871456+00:00

Affected: openEuler:20.03-LTS-SP1: activemq, openEuler:20.03-LTS-SP3: activemq, openEuler:22.03-LTS: activemq, openEuler:22.03-LTS-SP1: activemq, openEuler:22.03-LTS-SP2: activemq

The most popular and powerful open source messaging and Integration Patterns server. Security Fix(es): Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.  Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.(CVE-2023-46604)

 https://cve.radiocsirt.org/vuln/oxas-adv-2024-0001 OXAS-ADV-2024-0001 — OX App Suite Security Advisory OXAS-ADV-2024-0001 2026-10-02T16:07:19.871482+00:00 OXAS-ADV-2024-0001 https://cve.radiocsirt.org/vuln/rhsa-2023:6849 RHSA-2023:6849 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ Fuse 6.3 R20 HF1 security and bug fix update 2026-10-02T16:07:19.871497+00:00

activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

 https://cve.radiocsirt.org/vuln/sca-2024-0001 SCA-2024-0001 — Vulnerability in SICK Logistics Analytics Products and SICK Field Analytics 2026-10-02T16:07:19.871512+00:00

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both Apache ActiveMQ Classic and Apache ActiveMQ Legacy brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-46604 UBUNTU-CVE-2023-46604 2026-10-02T16:07:19.871528+00:00

Affected: Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq, Ubuntu:22.04:LTS: activemq, Ubuntu:Pro:22.04:LTS: activemq

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2773 WID-SEC-W-2023-2773 — Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung 2026-10-02T16:07:19.871551+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um beliebigen Programmcode auszuführen.