high CISA KEV

CVE-2026-34197

Apache ActiveMQ Improper Input Validation Vulnerability

// Description

Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.

// Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Federal remediation due Apr 30, 2026 — past due

// Coverage

CVE-2026-34197: Apache ActiveMQ Exploit Added to CISA KEV Catalog
Apr 17, 2026
Apache ActiveMQ CVE-2026-34197: CISA KEV Update & Mitigation
Apr 17, 2026