VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 4, 2026· Updated Nov 4, 2026

CVE-2026-108500

CVE-2026-108500

Description

Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an authenticated attacker to create or address a destination with a crafted name containing LDAP DN special characters (such as comma, plus, equals, backslash) can manipulate the LDAP search base used for ACL lookups.

This issue affects Apache ActiveMQ: from 6.3.0 before 6.3.3, from 5.19.0 before 5.19.12.

Users are recommended to upgrade to version 6.4.0, 6.3.3 or 5.19.12, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Apache/Activemqllm-fuzzy
    Range: from 6.3.0 before 6.3.3, from 5.19.0 before 5.19.12

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.