Is Your Server Vulnerable?

Check Your Apache Version

Instantly verify your Apache server’s security and benefit from Tomitribe’s expertise in patching over 250+ CVEs on Tomcat, TomEE, and ActiveMQ to stay ahead of vulnerabilities

Select Your Server

Am I affected?

Most recent CVEs

The 25 most recently disclosed, of 274 published. Browse the rest by product.

  • CVE-2026-90559 2026-09-12
    8.7 High

    snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress

    Apache ActiveMQ

    Details
  • CVE-2026-74761 2026-09-09
    Not scored

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId

    Apache ActiveMQ

    Details
  • CVE-2026-19203 2026-09-08
    8.3 High

    A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boun…

    Apache ActiveMQ

    Details
  • CVE-2026-19204 2026-09-07
    8.7 High

    A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and pot…

    Apache ActiveMQ

    Details
  • CVE-2026-84218 2026-09-01
    8.1 High

    Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)

    Apache ActiveMQ

    Details
  • CVE-2026-19032 2026-09-01
    6.9 Medium

    jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path

    Apache ActiveMQ

    Details
  • CVE-2026-59282 2026-08-27
    5.9 Medium

    Spring Framework Denial of Service via Unbounded List Growth in Data Binding

    Apache ActiveMQ

    Details
  • CVE-2026-77310 2026-08-24
    6.9 Medium

    jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)

    Apache ActiveMQ

    Details
  • CVE-2026-34502 2026-08-06
    7.5 High

    Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

    Apache HTTPD

    Details
  • CVE-2026-34501 2026-08-06
    7.5 High

    Apache Portable Runtime Utility: Heap buffer overflow in APR redis client

    Apache HTTPD

    Details
  • CVE-2026-34191 2026-08-06
    9.1 Critical

    Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle

    Apache HTTPD

    Details
  • CVE-2026-32327 2026-08-06
    9.1 Critical

    Apache Portable Runtime Utility: apr-util XML stack recursion crash

    Apache HTTPD

    Details
  • CVE-2025-49506 2026-08-06
    7.5 High

    Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack

    Apache HTTPD

    Details
  • CVE-2026-66274 2026-08-05
    7.5 High

    Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow

    Apache ActiveMQ

    Details
  • CVE-2026-66273 2026-08-05
    7.5 High

    Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authentication

    Apache ActiveMQ

    Details
  • CVE-2026-66257 2026-08-05
    7.5 High

    Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion

    Apache ActiveMQ

    Details
  • CVE-2026-61487 2026-07-28
    6.9 Medium

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

    Apache ActiveMQ

    Details
  • CVE-2026-59878 2026-07-28
    8.7 High

    Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

    Apache ActiveMQ

    Details
  • CVE-2026-59889 2026-07-14
    6.3 Medium

    jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization

    Apache ActiveMQ

    Details
  • CVE-2026-59888 2026-07-14
    6.3 Medium

    jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

    Apache ActiveMQ

    Details
  • CVE-2026-54475 2026-06-30
    9.3 Critical

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover

    Apache ActiveMQ

    Details
  • CVE-2026-53917 2026-06-30
    7.5 High

    Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

    Apache ActiveMQ

    Details
  • CVE-2026-53916 2026-06-30
    7.5 High

    Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

    Apache ActiveMQ

    Details
  • CVE-2026-52760 2026-06-30
    6.1 Medium

    Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console

    Apache ActiveMQ

    Details
  • CVE-2026-50750 2026-06-30
    7.5 High

    Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270

    Apache ActiveMQ

    Details