CVE-2026-101292

Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy(). The method calls Class.forName(clazz).getConstructor().newInstance() where clazz is read directly from the CORE protocol wire buffer without type validation. An authenticated federation peer can send a FEDERATION_DOWNSTREAM_CONNECT packet with a crafted class name, causing the broker to load and instantiate arbitrary classes visible to the Artemis module classloader. Static initializers (<clinit>) and no-argument constructors (<init>()) execute as side effects before the type cast, enabling denial of service via system-property poisoning, out-of-memory conditions via classloading, or broker state manipulation.

• CWE-470

• https://access.redhat.com/errata/RHSA-2026:53644
• https://access.redhat.com/security/cve/CVE-2026-101292
• https://bugzilla.redhat.com/show_bug.cgi?id=2482963

Published

Sep 28, 2026

Last Modified

Sep 28, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10124A vulnerability was determined in Shibby Tomato up to 1.28. …8.8
• CVE-2026-10125A vulnerability was identified in Edimax BR-6478AC 1.23. Aff…8.8
• CVE-2026-10126A security flaw has been discovered in Edimax BR-6478AC 1.23…8.8
• CVE-2026-10127A weakness has been identified in Edimax BR-6478AC 1.23. Thi…6.3
• CVE-2026-10128IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated u…6.5
• CVE-2026-10129IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side …8.5
• CVE-2026-10130QueryWeaver contains an authentication bypass vulnerability …8.8
• CVE-2026-10134IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to r…10
• CVE-2026-1014IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 …6.5
• CVE-2026-10140IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains im…9.6
• CVE-2026-10142kafka-python prior to 2.3.2 contains a denial-of-service vul…8.7
• CVE-2026-10143kafka-python prior to 2.3.2 contains a denial-of-service vul…7.5