Tag

#activemq

1 post tagged #activemq.

Analysis · May 20, 2026 · Colten Anderson

Your attack surface isn't just port 443

CVE-2023-46604 is a perfect-10 RCE in Apache ActiveMQ. The exploit isn't a web request; it's a single message to the broker on port 61616, a port most web-focused scanning and firewalling never considers. The broker then fetches a remote XML file and runs whatever's in it.