Skip to content
OpenAdvisories
High 1 exploited CVE ICSA-26-279-04 1 CVE

Hitachi Energy SOI

Published Sep 29, 2026 · Updated Oct 6, 2026 · Revision 2

Vendor: Hitachi Energy Product: SOI

Summary

Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

Vulnerabilities 1

  • High 8.8
    CVE-2026-34197 Exploited Public exploit Scanner template EPSS 98%

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

    Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia…

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ All Apache ActiveMQ Broker Debian Ubuntu Maven
    KEV Apr 16, 2026

Revision history

  1. #2

    Initial CISA Republication of Hitachi Energy PSIRT 8DBD000244 advisory

  2. #1

    Initial public release

References