Remote Code Execution Vulnerabilities in Apache ActiveMQ and OFBiz Detected

On June 1 and 2, 2026, Snort published alerts for remote code execution attempts targeting Apache ActiveMQ and Apache OFBiz. The ActiveMQ vulnerability involves insecure deserialization, allowing attackers to execute arbitrary commands via malicious Java classes. The OFBiz vulnerability exploits an unauthenticated URI, leading to potential remote code execution. Both vulnerabilities are categorized as high severity, with no known false positives reported. The attacks are aimed at web-based applications hosted on servers, highlighting the ongoing threat to public-facing applications. Security professionals are advised to monitor for these specific attack vectors and implement necessary defenses. Current status indicates active exploitation attempts in the wild.

Key Points: • Snort detected remote code execution attempts against Apache ActiveMQ and OFBiz. • ActiveMQ vulnerability involves insecure deserialization, while OFBiz exploits an unauthenticated URI. • Both vulnerabilities are classified as high severity with no known false positives.