CVE-2023-46604Vulnerability
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability
Reported by 7 independent sources · first reported by Huntress · last reported
Last reported 10 days ago
Fix due 23 Nov 2023
Used by ransomware: knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 22 Oct 2026
What the reports say
7 reports, newest first · the exact sentence from each-
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws“Armatura One is affected by CVE-2023-46604, a critical deserialization flaw, plus hardcoded key and credential issues.”
-
The Threat of AI-Driven Autonomous Penetration Testing, as Examined by ARTEX“OpenWire on TCP port 61616, ActiveMQ 5.15.15, And CVE-2023-46604”
-
Multiples vulnérabilités dans les produits Atlassian (06 octobre 2026)“Référence CVE CVE-2023-46604”
-
Armatura LLC Armatura One“Armatura One <4.7.2 (CVE-2023-46604, CVE-2026-94591, CVE-2026-94592, CVE-2026-94593, CVE-2026-94594)”
-
Exploits and vulnerabilities in Q2 2026“CVE-2023-46604: an insecure deserialization vulnerability in Apache ActiveMQ that allows arbitrary code execution in the context of the service process”
-
Apache ActiveMQ Exploit Leads to LockBit Ransomware“A threat actor exploited CVE-2023-46604 on an internet-facing Apache ActiveMQ server.”
-
Critical Vuln: Apache ActiveMQ CVE-2023-46604 Exploited“Critical Vuln: Apache ActiveMQ CVE-2023-46604 Exploited”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-43284, CVE-2025-8088, CVE-2019-12255, CVE-2019-12260, CVE-2019-12261, CVE-2019-12263, CVE-2018-0802, CVE-2017-11882, CVE-2017-0199, CVE-2023-38831, CVE-2025-6218, CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-31635, CVE-2026-43494, CVE-2026-46331, CVE-2022-0847, CVE-2019-13272, CVE-2021-22555
Thanks — we review every report.