{"id":"CVE-2026-50750","revision":"98a4c0c8561a4e67bfd0f09690da3a31","records":[{"revision":"98a4c0c8561a4e67bfd0f09690da3a31","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-50750","aliases":[],"title":"Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270","description":"Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.\n\nFollowing the fix for  CVE-2026-49270\u00A0an unauthenticated attacker can now cause broker OOM by sending an repeated BrokerInfo commands without sending\u00A0a ConnectionInfo, until the broker will crash with OOM.\nThis issue affects Apache ActiveMQ Broker: from 5.19.7 before 5.19.8, from 6.2.6 before 6.2.7; Apache ActiveMQ: from 5.19.7 before 5.19.8, from 6.2.6 before 6.2.7; Apache ActiveMQ All: from 5.19.7 before 5.19.8, from 6.2.6 before 6.2.7.\n\nUsers are recommended to upgrade to version 6.2.7, which fixes the issue.","state":0,"publishedAt":"2026-06-30T09:51:57.035+00:00","modifiedAt":"2026-06-30T13:21:45.456+00:00","affected":[{"ecosystem":"https://repo.maven.apache.org/maven2","name":"org.apache.activemq:activemq-broker","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"collectionURL\": \"https://repo.maven.apache.org/maven2\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"org.apache.activemq:activemq-broker\",\n                    \"product\": \"Apache ActiveMQ Broker\",\n                    \"vendor\": \"Apache Software Foundation\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"5.19.8\",\n                            \"status\": \"affected\",\n                            \"version\": \"5.19.7\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"lessThan\": \"6.2.7\",\n                            \"status\": \"affected\",\n                            \"version\": \"6.2.6\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"https://repo.maven.apache.org/maven2","name":"org.apache.activemq:apache-activemq","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"collectionURL\": \"https://repo.maven.apache.org/maven2\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"org.apache.activemq:apache-activemq\",\n                    \"product\": \"Apache ActiveMQ\",\n                    \"vendor\": \"Apache Software Foundation\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"5.19.8\",\n                            \"status\": \"affected\",\n                            \"version\": \"5.19.7\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"lessThan\": \"6.2.7\",\n                            \"status\": \"affected\",\n                            \"version\": \"6.2.6\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"https://repo.maven.apache.org/maven2","name":"org.apache.activemq:activemq-all","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"collectionURL\": \"https://repo.maven.apache.org/maven2\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageName\": \"org.apache.activemq:activemq-all\",\n                    \"product\": \"Apache ActiveMQ All\",\n                    \"vendor\": \"Apache Software Foundation\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"5.19.8\",\n                            \"status\": \"affected\",\n                            \"version\": \"5.19.7\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"lessThan\": \"6.2.7\",\n                            \"status\": \"affected\",\n                            \"version\": \"6.2.6\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://lists.apache.org/thread/nhkmbdym61yp6wwy0dny8w1p46sm87kr"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-50750","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-50750","identifiers":["CVE-2026-50750"]},"retained":false,"historicalAffected":[]}],"coverage":[]}