Apache ActiveMQ Vulnerability Allows Attackers to Trigger DoS Attacks with Malformed Packets

Back Cyberpress

Apache ActiveMQ Vulnerability Allows Attackers to Trigger DoS Attacks with Malformed Packets

Cyberpress • March 6, 2026

Share: View original

Tracked as CVE-2025-66168, the flaw impacts multiple ActiveMQ components, including the core broker package, the All module, ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apache ActiveMQ Vulnerability Allows DoS Attacks via Malformed Packets A medium-severity vulnerability (CVE-2025-66168) in Apache ActiveMQ enables authenticated attackers to launch Denial-of-Service (DoS) attacks using malformed network packets. Discovered by security researcher Gai Tanaka and confirmed by Apache maintainers, this flaw poses risks to systems utilizing ActiveMQ for messaging services. 3 sources 51

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)

Apache ActiveMQ