Chaining an Apache ActiveMQ RCE on a Fully Patched 6.2.5 (CVE-2026-34197)
crowdfense.com | vulnerability | High | CVE-2026-34197 | #rce | #public-poc | #featured | #vulnerability-research | #activemq | #java | #windows | #patch-bypass | #exploit-chain | #apache-activemq | #cve-2026-34197 | #webdav
Summary
Crowdfense demonstrates two Windows-specific bypasses that restore the CVE-2026-34197 Jolokia MBean RCE chain on ActiveMQ Classic 6.2.5. Apache ActiveMQ Classic 6.2.6 closes the demonstrated chain.
Why it matters
The research shows how parser mismatches and incomplete fixes can restore RCE on a nominally patched broker, making ActiveMQ Classic 6.2.6 the meaningful remediation point for this chain.
- CVE
- CVE-2026-34197
- Vendor
- Apache
- Product
- ActiveMQ Classic
- Affected versions
- Original ranges: < 5.19.5 and >= 6.0.0, < 6.2.3; demonstrated Windows fix-bypass chain affects 6.2.5 and is fixed in 6.2.6
- CVSS
- 8.8
- Published
- Collected
--- id: 3033 title: "Chaining an Apache ActiveMQ RCE on a Fully Patched 6.2.5 (CVE-2026-34197)" cve: CVE-2026-34197 cvss: 8.8 severity: high vendor: "Apache" product: "ActiveMQ Classic" affected_versions: "Original ranges: < 5.19.5 and >= 6.0.0, < 6.2.3; demonstrated Windows fix-bypass chain affects 6.2.5 and is fixed in 6.2.6" source_domain: crowdfense.com source_url: "https://www.crowdfense.com/apache-activemq-rce-bypass/" published_at: "2026-07-02 10:18" tags: ["rce", "public-poc", "featured", "vulnerability-research", "activemq", "java", "windows", "patch-bypass", "exploit-chain", "apache-activemq", "cve-2026-34197", "webdav"] phying_url: "https://phying.com/item/3033" lang: en --- # Chaining an Apache ActiveMQ RCE on a Fully Patched 6.2.5 (CVE-2026-34197) ## Summary Crowdfense demonstrates two Windows-specific bypasses that restore the CVE-2026-34197 Jolokia MBean RCE chain on ActiveMQ Classic 6.2.5. Apache ActiveMQ Classic 6.2.6 closes the demonstrated chain. ## Why it matters The research shows how parser mismatches and incomplete fixes can restore RCE on a nominally patched broker, making ActiveMQ Classic 6.2.6 the meaningful remediation point for this chain. ## Intelligence Metadata - **Sources:** crowdfense.com - **CVE:** CVE-2026-34197 - **CVSS:** 8.8 - **Vendor:** Apache - **Product:** ActiveMQ Classic - **Affected versions:** Original ranges: < 5.19.5 and >= 6.0.0, < 6.2.3; demonstrated Windows fix-bypass chain affects 6.2.5 and is fixed in 6.2.6 - **Published:** 2026-07-02 10:18 - **Original:** https://www.crowdfense.com/apache-activemq-rce-bypass/ - **Phying News:** https://phying.com/item/3033