Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache ActiveMQ KahaDB

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-111821

    Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal

    Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription with a clientId and subscription name that have a combined length > 65,535 (while separately being shorter) on a broker using KahaDB w…

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ KahaDB activemq Debian Ubuntu