점검 대응높음KEV 미등록
CVE-2026-49432
Apache Software Foundation Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp 취약점
Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can trigger denial-of-service behavior by sending a negative content-length. For the NIO STOMP transport, an attacker can keep streaming body bytes and grow the per-connection command buffer beyond configured limits to cause OOM. For the blocking STOMP protocol, an error will instead force abnormal transport exception handling for the affected connection and closure. This issue affects Apache ActiveMQ: before 5.19.8,...
- 대응 우선순위
- 점검
- CVSS
- 7.5
- EPSS
- 0.58% 백분위 44.3% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.30