{"schemaVersion":3,"id":"CVE-2026-33227","aliases":["UBUNTU-CVE-2026-33227","DEBIAN-CVE-2026-33227","CGA-g933-9rv5-hhg4","CGA-hjh4-c4ph-r8hf","CGA-jg7p-6xpw-v2ww","CGA-pj9x-vgrq-fhc7","CGA-q43j-rqx8-q52c","CGA-v4r7-mwxf-w6wh","CGA-22v5-hg86-m6gj","CGA-2vwq-wf75-f7mm","CGA-3f3f-3g27-f5m7","CGA-3mhg-mm8v-mrhc","CGA-55fj-g3x3-c6m4","CGA-59qw-j23j-27hc","CGA-6jf3-x7xx-cr59","CGA-6pcr-v8x8-hh3j","CGA-74xv-45fg-vvcj","CGA-79fr-9wq3-mphh","CGA-79wr-jmw5-ppvj","CGA-7mq5-r2pj-c9p3","CGA-85fx-m739-26p4","CGA-8ggc-fx69-h5jv","CGA-c557-ppfm-pp6c","CGA-cx5w-288c-8gh5","CGA-fj3m-3374-9p9v","CGA-fxr4-mrv8-rv8x","CGA-gvjx-wf4v-c6mm","CGA-h393-hhg8-qj92","CGA-hwj8-75ww-ggf9","CGA-hwmp-x5hv-rpqv","CGA-mp45-hccx-mx87","CGA-mwpm-pr29-c63g","GHSA-h2h4-5m64-m273","BIT-activemq-2026-33227","CGA-q3mh-frvf-3qxf","CGA-q693-6q9c-q33r","CGA-rrh8-fvhr-x937","CGA-rx5p-6x49-54hp","CGA-vwr6-j49p-3gjf","CGA-w243-vp8m-52mf","CGA-wmc8-vpwj-9gwc","CGA-wv35-ph2h-hmp4","CGA-x3g3-8j9q-9pwj","CGA-xhch-mq56-c66q","CGA-xjx2-4qrj-5mjm","CGA-xmfw-9m7g-9gwj"],"status":"published","duplicateOf":null,"title":null,"description":"Improper validation and restriction of a classpath path name vulnerability in\n\n Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ.\n\n\n\nIn two instances (when creating a Stomp consumer and also browsing messages in the Web console) an authenticated user provided \"key\" value could be constructed to traverse the classpath due to path concatenation. As a result, the application is exposed to a classpath path resource loading vulnerability that could potentially be chained together with another attack to lead to exploit.\n\n\n\n\n\nThis issue affects Apache ActiveMQ Client: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ Broker: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ All: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ Web: before 5.19.3, from 6.0.0 before 6.2.2; Apache ActiveMQ: before 5.19.3, from 6.0.0 before 6.2.2.\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue. Note: 5.19.3 and 6.2.2 also fix this issue, but that is limited to non-Windows environments due to a path separator resolution bug fixed in 5.19.4 and 6.2.3.","dates":{"published":"2026-04-07T07:50:58.897Z","modified":"2026-04-08T15:44:39.427Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":7.2,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":7.2,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":7.2,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":7.2,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":7.2,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00675,"percentile":0.51371,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.256,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00419},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00675,"percentile":0.51371}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00419,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00675,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00675,"percentile":0.51371}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"apache software foundation","product":"apache activemq","name":"Apache ActiveMQ","label":"apache activemq","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_activemq"},{"vendor":"apache software foundation","product":"apache activemq all","name":"Apache ActiveMQ All","label":"apache activemq all","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_activemq_all"},{"vendor":"apache software foundation","product":"apache activemq broker","name":"Apache ActiveMQ Broker","label":"apache activemq broker","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_activemq_broker"},{"vendor":"apache software foundation","product":"apache activemq client","name":"Apache ActiveMQ Client","label":"apache activemq client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_activemq_client"},{"vendor":"apache software foundation","product":"apache activemq web","name":"Apache ActiveMQ Web","label":"apache activemq web","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_activemq_web"},{"vendor":"apache","product":"activemq","name":"ActiveMQ","label":"activemq","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"apache-activemq","label":"Apache ActiveMQ Classic","category":"server-app"}},"hubHref":"/vendor/apache/activemq"},{"vendor":"apache","product":"activemq_broker","name":"activemq broker","label":"activemq_broker","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":"/vendor/apache/activemq_broker"},{"vendor":"apache","product":"activemq_web","name":"activemq web","label":"activemq_web","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":"/vendor/apache/activemq_web"},{"vendor":"chainguard","product":"apache-activemq-6.1","name":"apache-activemq-6.1","label":"apache-activemq-6.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-6.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-activemq-artemis","name":"apache-activemq-artemis","label":"apache-activemq-artemis","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-artemis","purlType":"apk","versions":[{"text":"< 2.53.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.53.0-r5","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"apache-artemis","label":"Apache Artemis","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-activemq-fips-6.1","name":"apache-activemq-fips-6.1","label":"apache-activemq-fips-6.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-fips-6.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.27-community","name":"geoserver-2.27-community","label":"geoserver-2.27-community","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.27-community","purlType":"apk","versions":[{"text":"< 2.27.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.27.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28-community","name":"geoserver-2.28-community","label":"geoserver-2.28-community","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28-community","purlType":"apk","versions":[{"text":"< 2.28.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-activemq-artemis","name":"apache-activemq-artemis","label":"apache-activemq-artemis","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-activemq-artemis","purlType":"apk","versions":[{"text":"< 2.53.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.53.0-r5","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"apache-artemis","label":"Apache Artemis","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r2","eol":null,"hubHref":null},{"vendor":"debian","product":"activemq","name":"activemq","label":"activemq","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/activemq","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"activemq","name":"activemq","label":"activemq","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/activemq","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.apache.activemq","product":"activemq-all","name":"org.apache.activemq:activemq-all","label":"activemq-all","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.activemq/activemq-all","purlType":"maven","versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":null},{"vendor":"org.apache.activemq","product":"activemq-broker","name":"org.apache.activemq:activemq-broker","label":"activemq-broker","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.activemq/activemq-broker","purlType":"maven","versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":null},{"vendor":"org.apache.activemq","product":"activemq-client","name":"org.apache.activemq:activemq-client","label":"activemq-client","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.activemq/activemq-client","purlType":"maven","versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":null},{"vendor":"org.apache.activemq","product":"activemq-web","name":"org.apache.activemq:activemq-web","label":"activemq-web","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.activemq/activemq-web","purlType":"maven","versions":[{"text":"< 5.19.3","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, < 6.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.19.3 | ≥ 6.0.0, < 6.2.2","eol":null,"hubHref":null}],"affectedCount":22,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://activemq.apache.org/security-advisories.data/CVE-2026-33227-announcement.txt","label":"activemq.apache.org/security-advisories.data/CVE-2026-33227-announcement.txt","hostname":"activemq.apache.org","tags":["Vendor Advisory","REPORT","Advisory","WEB"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/06/4","label":"www.openwall.com/lists/oss-security/2026/04/06/4","hostname":"www.openwall.com","tags":["REPORT","WEB","Mailing List","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-33227","label":"ubuntu.com/security/CVE-2026-33227","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33227","label":"www.cve.org/CVERecord?id=CVE-2026-33227","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-33227","label":"security-tracker.debian.org/tracker/CVE-2026-33227","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://repo.maven.apache.org/maven2","label":"repo.maven.apache.org/maven2","hostname":"repo.maven.apache.org","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33227.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33227.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33227","label":"nvd.nist.gov/vuln/detail/CVE-2026-33227","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/apache/activemq","label":"github.com/apache/activemq","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-3GQH-W9C6-V686"]},"timeline":[{"kind":"published","date":"2026-04-07T07:50:58.897Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-08T15:44:39.427Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":17,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:37:04.344Z","stale":false,"partial":false}}