CVE-2026-24457

An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved. This is fixed in OpenMQ 6.5.2, 6.9.0, and in GlassFish 7.0.26, 7.1.1, and 8.0.2.

• CWE-22
• CWE-27
• CWE-22

• https://gitlab.eclipse.org/security/cve-assignment/-/issues/84Vendor Advisory

Published

Mar 5, 2026

Last Modified

Aug 5, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-24449For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords …5.1
• CVE-2026-2445The affected product accepts user-supplied input within a UR…6.1
• CVE-2026-24450An integer overflow vulnerability exists in the uncompressed…9.8
• CVE-2026-24451Gitea 1.26.2 allows fork synchronization to continue after a…7.5
• CVE-2026-24452An OS command injection vulnerability exists in XWEB Pro v…8.8
• CVE-2026-24455The embedded web interface of the device does not support HT…7.5
• CVE-2026-24458Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.1…7.5
• CVE-2026-2446The PowerPack for LearnDash WordPress plugin before 1.3.0 do…9.8
• CVE-2026-24464When running in Appliance mode, a directory traversal vulner…6.9
• CVE-2026-24465Stack-based buffer overflow vulnerability exists in ELECOM w…9.8
• CVE-2026-24466Products provided by Oki Electric Industry Co., Ltd. and its…8.4
• CVE-2026-24467OpenAEV is an open source platform allowing organizations to…9.8