CVE-2026-75880

⚪ Do wiadomości

Wykorzystanie złośliwych wildcardów w Apache Artemis prowadzi do odmowy usługi.

CVSS

6.5

EPSS

0.3%

Exploit

none

Vendor

apache

Opis źródłowy (NVD)

An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes this issue.

dos Brak patcha

Źródła i daty

Źródło	Wartość
NVD – CVSS	6.5
CISA KEV (aktywnie wykorzystywane)	Nie
FIRST EPSS (prawdopodobieństwo exploita)	0.3%
Opublikowano (NVD)	2026-09-10 05:17:01 UTC
Ostatnia modyfikacja (NVD)	2026-09-16 01:10:04 UTC

Referencje

https://lists.apache.org/thread/db34g9qoxd8p08086cr95683fkb8wm5r ([email protected]) [Mailing List, Vendor Advisory]
http://www.openwall.com/lists/oss-security/2026/09/10/7 (af854a3a-2127-422b-91ae-364da2661108) [Mailing List, Third Party Advisory]