Skip to content
Threat Feed

CPE

Cpe:2.3:a:apache:activemq_nms_amqp:*:*:*:*:*:*:*:*

1 brief RSS
critical threat

Critical Deserialization Vulnerability in Apache ActiveMQ NMS AMQP Client (CVE-2025-54539)

A critical deserialization of untrusted data vulnerability (CVE-2025-54539) exists in Apache ActiveMQ NMS AMQP Client <= v2.3.0, where an attacker controlling or impersonating an AMQP broker can send malicious serialized data that the client deserializes unsafely, allowing arbitrary code execution on the client system.

ActiveMQ NMS AMQP Client <= v2.3.0 deserialization rce activemq cve-2025-54539 windows
2r 1t 1c