Critical 9.8
KEV + Ransomware
CVE-2023-46604
AhnLab Demonstrates Apache ActiveMQ CVE-2023-46604 Exploitation via Autonomous AI Framework Artex
Vendor / product: Apache ActiveMQ
Public PoC: Yes
First tracked by RiskWire: 2026-10-19
CISA KEV catalog
Added to KEV
Federal remediation due
2023-11-23 (1061 days overdue)
Ransomware campaign use
Known
CISA description
Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sources & citations (2)
- 안랩 "AI 자율 공격 주의"…명령어 한줄로 서버 해킹 n.news.naver.com · 2026-10-18
- "취약점 알려줄래"…AI끼리 협업해 내부망 스스로 찾은 후 침투 n.news.naver.com · 2026-10-18
References
See CVE-2023-46604 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →