This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes this issue.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Apache Software Foundation | Apache Artemis | unaffected |
|
||||||
| Apache Software Foundation | Apache ActiveMQ Artemis | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 10 Sep 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes this issue. | |
| Title | Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service | |
| Weaknesses | CWE-1333 | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: apache
Published:
Updated: 2026-09-10T05:12:01.308Z
Reserved: 2026-08-18T12:59:58.950Z
Link: CVE-2026-75880
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-10T05:17:01.673
Modified: 2026-09-10T05:17:01.673
Link: CVE-2026-75880
Redhat
No data.
OpenCVE Enrichment
No data.