HIGHCVSS 8.8Actively exploited · CISA KEV since 2026-04-16Vulnerability
CVE-2026-34197
Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.
Properties
- Vulnerability name
- Apache ActiveMQ Improper Input Validation Vulnerability
- Epss score
- 0.15492
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2026-04-30
- Exploited euvd since
- 2026-04-16T00:00:00+00:00
- Date added
- 2026-04-16
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Ghsa updated
- 2026-04-13T19:21:56Z
- Score
- 8.8
- Euvd base score version
- 3.1
- Euvd vendor
- Apache Software Foundation
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 8.8
- Is ghsa only
- false
- Vendor project
- Apache
- Content hash
- 5f39b250eebf4bc862f68e0fea86d50fd7cc1918d7a81cdbafe7d6f6ab6300eb
- Published at
- 2026-04-07T09:16:20.967
- Euvd updated
- 2026-08-17T12:05:05+00:00
- Last modified
- 2026-08-04T13:18:20.950
- Euvd epss pct
- 15.49
Related Entities (11)
HAS_WEAKNESS (3)
AFFECTS (2)
AFFECTS_PRODUCT (2)
VULNERABLE_TO (2)
DESCRIBES (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph