The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in     Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin     web console page to construct a malicious broker name that bypasses name validation to include an xbean     binding that can be later used by a VM transport to load a remote Spring XML application. The attacker can     then use the DestinationView mbean to send a message to trigger a VM transport creation that will     reference this malicious broker name which can lead to loading the malicious Spring XML context file.
    Because Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService     validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory     methods such as Runtime.exec(). This issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before     6.2.5; Apache ActiveMQ Broker: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ All: before 5.19.6,     from 6.0.0 before 6.2.5. Users are recommended to upgrade to version 6.2.5 or 5.19.6, which fixes the     issue. (CVE-2026-41044)

  - Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in     Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All.An authenticated attacker can use the admin     web console page to construct a malicious broker name that bypasses name validation to include an xbean     binding that can be later used by a VM transport to load a remote Spring XML application.The attacker can     then use the DestinationView mbean to send a message to trigger a VM transport creation that will     reference this malicious broker name which can lead to loading the malicious Spring XML context     file.Because Spring's ResourceXmlApplicationContext instantiates all singleton beans before the     BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through     bean factory methods such as Runtime.exec().This issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0     before 6.2.5; Apache ActiveMQ Broker: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ All: before     5.19.6, from 6.0.0 before 6.2.5.Users are recommended to upgrade to version 6.2.5 or 5.19.6, which fixes     the issue. (CVE-2026-41044)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-41044

high Nessus Plugin ID 310128

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.5 May 5, 2026, 5:46 AM CVSS metrics ("CVSSv2 score" set to 6.5. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P") CVSSv2 severity (based on CVE-2026-41044, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605050546
Version 1.3 Apr 29, 2026, 12:50 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604291250
Version 1.2 Apr 27, 2026, 11:43 AM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202604271143
Version 1.1 Apr 24, 2026, 4:28 PM New Plugin Feed: 202604241628