Synced 02 Nov 2026 13:39 UTC Account

Is ActiveMQ 6.1.8 patched?

Apache · cycle 6.1 · end of life
6.1.820/100Critical · exploited

Current stable (6.4.0): 100/100

Minimum safe version6.3.2

6.1.8 has 16 open critical-or-high vulnerabilities. Run 6.3.2 or later to clear them. See what 6.3.2 fixes →

Upgrade impact: Minor upgrade. Minor releases are usually backwards-compatible, but can add or change behaviour — test in staging before production.

Health score20/100
Open issues24
Exploited now1
Cycle 6.1 EOL2025-12-02
Latest release6.4.0

Summary iPlain-English security status for ActiveMQ 6.1.8, built from its CVEs, active-exploitation data, end-of-life date and latest release.

ActiveMQ 6.1.8 is part of the 6.1 release line. 1 actively-exploited vulnerability affects it (CISA KEV). The minimum safe version is 6.3.2 — upgrade to it or later to clear the open critical/high issues. The 6.1 line reached end-of-life on 2025-12-02, so it no longer receives security patches. The latest supported ActiveMQ release is 6.4.0.

Known issues affecting 6.1.8

Exploited first, then by exploitation probability.

CVE-2026-34197 HIGH exploited EPSS 98% → fixed in 6.2.3 CVE-2026-40466 HIGH EPSS 5% → fixed in 6.2.5 CVE-2026-42253 MEDIUM EPSS 1% → fixed in 6.2.6 CVE-2026-41044 HIGH EPSS 1% → fixed in 6.2.5 CVE-2026-39304 HIGH EPSS 1% → fixed in 6.2.4 CVE-2025-66168 MEDIUM EPSS 1% → fixed in 5.19.2 CVE-2026-49432 HIGH EPSS 1% → fixed in 6.2.7 CVE-2026-59878 HIGH EPSS 1% → fixed in 6.2.8 CVE-2026-42588 HIGH EPSS 1% → fixed in 6.2.6 CVE-2026-50734 HIGH EPSS 1% → fixed in 6.2.7 CVE-2026-53916 HIGH EPSS 1% → fixed in 6.2.7 CVE-2026-53917 HIGH EPSS 1% → fixed in 6.2.7 CVE-2026-52760 MEDIUM EPSS 1% → fixed in 6.2.7 CVE-2026-49434 HIGH EPSS 1% → fixed in 6.2.7 CVE-2026-74761 HIGH EPSS 1% → fixed in 6.3.2 CVE-2026-45505 HIGH EPSS 1% → fixed in 6.2.6 CVE-2026-54475 HIGH EPSS 1% → fixed in 6.2.7 CVE-2026-41043 MEDIUM EPSS 1% → fixed in 6.2.5 CVE-2026-49877 HIGH EPSS 1% → fixed in 6.2.7 CVE-2026-61487 MEDIUM EPSS 0% → fixed in 6.2.8

Other ActiveMQ versions

Check another release line of ActiveMQ.

ActiveMQ 6.4.0ActiveMQ 6.3.3ActiveMQ 6.2.10ActiveMQ 6.0.1ActiveMQ 5.19.12ActiveMQ 5.18.7ActiveMQ 5.17.7ActiveMQ 5.16.8ActiveMQ 5.15.16ActiveMQ 5.14.5ActiveMQ 5.13.5ActiveMQ 5.12.3ActiveMQ 5.11.4ActiveMQ 5.10.2ActiveMQ 5.9.1ActiveMQ 5.8.0ActiveMQ 5.7.0ActiveMQ 5.6.0ActiveMQ 5.5.1ActiveMQ 5.4.3ActiveMQ 5.3.1ActiveMQ 5.2.0ActiveMQ 5.1.0ActiveMQ 5.0.0

Frequently asked

Is ActiveMQ 6.1.8 patched?

No — 1 actively-exploited vulnerability affects ActiveMQ 6.1.8. Upgrade to at least 6.3.2.

What version should I upgrade ActiveMQ 6.1.8 to?

Upgrade ActiveMQ 6.1.8 to at least 6.3.2 to clear its 16 open critical-or-high vulnerabilities.

When does ActiveMQ 6.1 reach end-of-life?

ActiveMQ 6.1 reached end-of-life on 2025-12-02 and no longer receives security patches.

What is the latest version of ActiveMQ?

The latest supported ActiveMQ release is 6.4.0.

Is ActiveMQ 6.1.8 still receiving security updates?

No — ActiveMQ 6.1.8 is on the 6.1 line, which reached end-of-life on 2025-12-02 and no longer receives security updates. Upgrade to 6.4.0 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Apache's official advisory before you patch or upgrade.