Product · Apache Software Foundation

Apache ActiveMQ MQTT Module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2025-66168

Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated

WARNING: Users of 6.x should upgrade to 6.2.4 or later as the fix was missed in previous 6.x releases. See the following for more details: https://activemq.apache.org/security-advisories.data/CVE-2026-40046-announcement.txt https://www.cve.org/CVERecord?id=C…

Apache Software Foundation Apache ActiveMQ Apache ActiveMQ All Module Apache ActiveMQ MQTT Module Debian Ubuntu Maven

Mar 4, 2026