점검 대응높음KEV 미등록
CVE-2026-41044
Apache Software Foundation Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All 취약점
Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to include an xbean binding that can be later used by a VM transport to load a remote Spring XML application. The attacker can then use the DestinationView mbean to send a message to trigger a VM transport creation that will reference this malicious broker name which can lead to loading the malicious Spr...
- 대응 우선순위
- 점검
- CVSS
- 8.8
- EPSS
- 0.98% 백분위 58.8% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.04.24