THREAT OPS › Threat News › CVE-2026-57967: Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
CVE-2026-57967: Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
<p>Posted by Clebert Suconic on Sep 09</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Artemis (org.apache.artemis:artemis-server) 2.50.0 through 2.56.0<br /> - Apache ActiveMQ Artemis (org.apache.activemq:artemis-server) 1.0.0 through 2.44.0<br /> <br /> Description:<br /> <br /> An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to
Indicators of compromise
- CVE-2026-57967cve
Original source: https://seclists.org/oss-sec/2026/q3/698