Critical severity9.1NVD Advisory· Published Mar 5, 2026· Updated Aug 5, 2026
CVE-2026-24457
CVE-2026-24457
Description
An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ 6.5.2, 6.9.0, and in GlassFish 7.0.26, 7.1.1, and 8.0.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- gitlab.eclipse.org/security/cve-assignment/-/issues/84nvdVendor Advisory
News mentions
0No linked articles in our index yet.