Denial of Service Vulnerability in Apache Artemis and ActiveMQ Artemis

CVE-2026-75880

What is CVE-2026-75880?

An authenticated client has the ability to manipulate a consumer with a wildcard selector, which may lead to excessive evaluation during message delivery. This overloading of a shared broker thread can result in a denial of service, impacting system availability. The vulnerability impacts specific versions of both Apache Artemis and ActiveMQ Artemis, underscoring the importance of timely updates to version 2.57.0 to secure against this risk.

References