CVE-2026-32642
CVE-2026-32642: 2 tracked advisory records across Apache, Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Apache
1 advisory- Advisory severityLow2.3
Low [CVE-2026-32642] Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists
CVE-2026-32642Source published Source updated
Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue" permission but does not have the "createAddress" permission and address auto-creation is disabled. In this circumstance, a temporary address will be created whereas the attempt to create the non-durable subscription should instead fail since the user is not authorized to create the corresponding address. When the OpenWire connection is closed the address is removed. This issue affects Apache Artemis: from 2.50.0 through 2.52.0; Apache ActiveMQ Artemis: from 2.0.0 through 2.44.0. Users are…
- Affected products in this advisory
- Apache ActiveMQ
- Apache Artemis
- Apache ActiveMQ Artemis
- ActiveMQ
- Source-reported affected versions
- 2.50.0 through 2.52.0
- 2.0.0 through 2.44.0.
- through 2.44.0
- Source-reported fixed versions
- 2.53.0
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Red Hat
1 advisory- Advisory severityMedium4.3
Medium [CVE-2026-32642] Apache Artemis and Apache ActiveMQ Artemis: Unauthorized address creation due to incorrect authorization during JMS topic subscription.
CVE-2026-32642Source published
Apache Artemis and Apache ActiveMQ Artemis: Unauthorized address creation due to incorrect authorization during JMS topic subscription.. Red Hat rates this moderate (CVSS 4.3). Affected package(s): artemis-server. Resolved in Red Hat advisory RHSA-2026:8509 — update the affected packages (`sudo dnf update`).
- Related products — impact not confirmed
- artemis-server
- Red Hat Enterprise Linux
- Source-reported affected versions
- artemis-server
- Source-reported fixed versions
- RHSA-2026:8509
- Mitigation guidance
- Update the affected package(s) to the fixed version shipped in RHSA-2026:8509 (`sudo dnf update` / `yum update`).
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.