CyberRota
← Ana sayfaya dön

CVE-2026-53916

HIGH · CVSS 7.5 EPSS %0.80

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-30T11:16:30.150 · Çekilme zamanı: 2026-07-15T12:04:16.857111+00:00

CyberRota Yorumu

Bellek tüketimine neden olabilir.

CVE
CVE-2026-53916
Severity
HIGH
CVSS
7.5
EPSS
%0.80
Apache

Orijinal NVD Açıklaması

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer them without limit, exhausting the JVM heap. This issue affects Apache ActiveMQ: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ All: before 5.19.8, from 6.0.0 before 6.2.7; Apache ActiveMQ Stomp: before 5.19.8, from 6.0.0 before 6.2.7. Users are recommended to upgrade to version 6.2.7 or 5.19.8, which fixes the issue.