ГлавнаяУязвимости → CVE-2026-24457
9.1критическая

CVE-2026-24457

Описание

An unsafe parsing of OpenMQ's configuration, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved.

Затрагиваемое ПО
Eclipse Openmq
CVSS
Балл9.1 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Источники
https://gitlab.eclipse.org/security/cve-assignment/-/issues/84