Back Cybersecuritynews

Apache ActiveMQ Allow Attackers to Trigger DoS Attacks With Malformed Packets

Cybersecuritynews •Abinaya • March 6, 2026

A medium-severity flaw in ActiveMQ (CVE-2025-66168, CVSS 5.4) allows authenticated attackers to trigger a Denial-of-Service (DoS) using malformed network packets. The issue was initially discovered by security researcher Gai Tanaka and confirmed on the Apache mailing list by maintainers Christopher L. Shannon and Matt Pavlovich. The root cause of this vulnerability lies in the Apache […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apache ActiveMQ Vulnerability Allows DoS Attacks via Malformed Packets A medium-severity vulnerability (CVE-2025-66168) in Apache ActiveMQ enables authenticated attackers to launch Denial-of-Service (DoS) attacks using malformed network packets. Discovered by security researcher Gai Tanaka and confirmed by Apache maintainers, this flaw poses risks to systems utilizing ActiveMQ for messaging services. 3 sources 51

Extracted Entities

Apache ActiveMQ Allow Attackers to Trigger DoS Attacks With Malformed Packets

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)