Book a meeting

› 11:34:45 NCSC-NL CVE-2026-20230 Cisco Unified Communications Manager · › 06:28:25 CERT-EE — May saw the highest number of cyber incidents with an impact recorded… · › 14:18:39 CCB CVE-2026-7312 Multiple Critical Vulnerabilities in Progress Sitefinity · › 11:52:25 BSI CVE-2026-40385 libexif: Mehrere Schwachstellen ermöglichen Denial of Service und Off… · › 11:52:24 BSI CVE-2026-25679 Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten An… · › 11:52:23 BSI CVE-2025-61732 Golang Go: Mehrere Schwachstellen · › 11:52:22 BSI CVE-2025-61726 Golang Go: Mehrere Schwachstellen · › 11:47:39 BSI CVE-2026-33845 GnuTLS: Mehrere Schwachstellen · › 11:47:37 BSI CVE-2026-34986 Red Hat Enterprise Linux (go-jose): Schwachstelle ermöglicht Denial o… · › 11:47:35 BSI CVE-2026-33186 Red Hat OpenShift Container Platform (gRPC-Go): Schwachstelle ermögli… · › 11:47:33 BSI CVE-2026-27140 Golang Go: Mehrere Schwachstellen · › 11:47:32 BSI CVE-2026-35385 OpenSSH: Mehrere Schwachstellen ·

← Back to console

Critical CCB · Belgium CVE-2025-54539

Critical Deserialization of Untrusted Data vulnerability in Apache Ac…

Published 27 May 2026 at 16:59

Description

CVE-2025-54539 is a deserialization vulnerability in the Apache ActiveMQ NMS AMQP Client used by .NET applications when connecting to AMQP servers. The client performs binary deserialization of data received from an AMQP broker without sufficient validation or sandboxing. Maliciously crafted serialized objects returned by a broker or injected via a man-in-the-middle can trigger object instantiation and execution of code paths during deserialization. The practical result is remote code execution (RCE) in the context of the client process. The defect affects all NMS AMQP releases up to and including 2.3.0 and is fixed in 2.4.0.