THREAT OPS › Threat News › [NVD] CVE-2026-27446 (CRITICAL 9.8) — Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rog
[NVD] CVE-2026-27446 (CRITICAL 9.8) — Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rog
CVE-2026-27446 CVSS: 9.8 CRITICAL Published: 2026-03-04T09:15:56.837
Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This could potentially result in messag
Indicators of compromise
- CVE-2026-27446cve
- https://artemis.apache.org/components/artemis/documentation/latest/intercepting-operations.htmlurl
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-27446