Over 6,400 Apache ActiveMQ Servers Vulnerable to Actively Exploited Code Injection Flaw

The nonprofit security organization Shadowserver identified over 6,400 Apache ActiveMQ servers exposed online that are vulnerable to active exploitation of a high-severity code injection flaw. The vulnerability is being targeted in ongoing attacks, though specific technical details such as the CVE ID or exact attack vectors were not disclosed in the report. No precise dates for the discovery or exploitation timeline were provided. The impacted systems are publicly accessible instances of Apache ActiveMQ, a widely used open-source message broker. The flaw poses a risk of unauthorized code execution, though the full scope of potential impacts remains unspecified.