---
id: 3033
title: "Chaining an Apache ActiveMQ RCE on a Fully Patched 6.2.5 (CVE-2026-34197)"
cve: CVE-2026-34197
cvss: 8.8
severity: high
vendor: "Apache"
product: "ActiveMQ Classic"
affected_versions: "Original ranges: < 5.19.5 and >= 6.0.0, < 6.2.3; demonstrated Windows fix-bypass chain affects 6.2.5 and is fixed in 6.2.6"
source_domain: crowdfense.com
source_url: "https://www.crowdfense.com/apache-activemq-rce-bypass/"
published_at: "2026-07-02 10:18"
tags: ["rce", "public-poc", "featured", "vulnerability-research", "activemq", "java", "windows", "patch-bypass", "exploit-chain", "apache-activemq", "cve-2026-34197", "webdav"]
phying_url: "https://phying.com/item/3033"
lang: en
---

# Chaining an Apache ActiveMQ RCE on a Fully Patched 6.2.5 (CVE-2026-34197)

## Summary

Crowdfense demonstrates two Windows-specific bypasses that restore the CVE-2026-34197 Jolokia MBean RCE chain on ActiveMQ Classic 6.2.5. Apache ActiveMQ Classic 6.2.6 closes the demonstrated chain.

## Why it matters

The research shows how parser mismatches and incomplete fixes can restore RCE on a nominally patched broker, making ActiveMQ Classic 6.2.6 the meaningful remediation point for this chain.

## Intelligence Metadata

- **Sources:** crowdfense.com
- **CVE:** CVE-2026-34197
- **CVSS:** 8.8
- **Vendor:** Apache
- **Product:** ActiveMQ Classic
- **Affected versions:** Original ranges: < 5.19.5 and >= 6.0.0, < 6.2.3; demonstrated Windows fix-bypass chain affects 6.2.5 and is fixed in 6.2.6
- **Published:** 2026-07-02 10:18
- **Original:** https://www.crowdfense.com/apache-activemq-rce-bypass/
- **Phying News:** https://phying.com/item/3033