CVE-2026-75880
Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excessive evaluation during message delivery attempts, occupying a shared broker thread and leading to denial of service. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes this issue.
| CWE | CWE-1333 |
| Vendor | apache software foundation |
| Product | apache artemis |
| Published | Sep 10, 2026 |
| Last Updated | Sep 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for apache software foundation apache artemis
Be the first to know when new medium vulnerabilities affecting apache software foundation apache artemis are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apache Software Foundation / Apache Artemis
2.50.0 ≤ 2.56.0
Apache Software Foundation / Apache ActiveMQ Artemis
1.0.0 ≤ 2.44.0
References
Credits
Mike Read