CVE-2026-75880

Description

An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes this issue.

Traduire en français

Produits concernés

• Apache Software Foundation Apache Artemis
• Apache Software Foundation Apache ActiveMQ Artemis
• Apache artemis

Scores CVSS

Faiblesses (CWE)

• CWE-1333

Références

• https://lists.apache.org/thread/db34g9qoxd8p08086cr95683fkb8wm5r Mailing ListVendor Advisory
• http://www.openwall.com/lists/oss-security/2026/09/10/7 Mailing ListThird Party Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories