https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:02:41.307876+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-49877 CVE-2026-49877 — Apache ActiveMQ: Authenticated web users retain admin access by default in the Web Console 2026-10-05T15:02:41.323426+00:00

Affected: Apache Software Foundation Apache ActiveMQ

Improper Authorization vulnerability in Apache ActiveMQ.

An authenticated low-privilege Web Console user by default can access /admin/* paths in the Web Console. The default Jetty settings incorrectly did not limit those paths to only admins. This issue affects Apache ActiveMQ: before 5.19.8, from 6.0.0 before 6.2.7.

Users are recommended to upgrade to version 6.2.7 or 5.19.8, which fixes the issue.