{"schema":"vulnpedia.poc/1","cve":"CVE-2026-34197","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-04-16","ransomware":false},"epss":{"score":0.98256,"percentile":0.99915},"cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb","executable":true,"sourceId":"exploit/multi/http/apache_activemq_jolokia_rce","description":"Apache ActiveMQ RCE via Jolokia addNetworkConnector","verification":"catalogued","source":"metasploit","modified":"2026-05-28 12:56:10 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/apache_activemq_jolokia_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/apache_activemq_jolokia_rce","modified":"2026-05-28 12:56:10 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/52fc401b4422","executable":false,"sourceId":"52fc401b4422","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"52fc401b4422","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/52fc401b4422"}],"repositoryUrl":"https://github.com/dinosn/CVE-2026-34197"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/971f55b2135a","executable":false,"sourceId":"971f55b2135a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"971f55b2135a","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/971f55b2135a"}],"repositoryUrl":"https://github.com/xshysjhq/CVE-2026-34197-payload-Apache-ActiveMQ-"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a5dc5f220708","executable":false,"sourceId":"a5dc5f220708","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a5dc5f220708","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/a5dc5f220708"}],"repositoryUrl":"https://github.com/LAT-06/CVE-2026-34197"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3db05bddb604","executable":false,"sourceId":"3db05bddb604","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3db05bddb604","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/3db05bddb604"}],"repositoryUrl":"https://github.com/DEVSECURITYSPRO/CVE-2026-34197"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f57a244efa6a","executable":false,"sourceId":"f57a244efa6a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f57a244efa6a","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/f57a244efa6a"}],"repositoryUrl":"https://github.com/KONDORDEVSECURITYCORP/CVE-2026-34197"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ebf86298fa7d","executable":false,"sourceId":"ebf86298fa7d","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ebf86298fa7d","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/ebf86298fa7d"}],"repositoryUrl":"https://github.com/AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/fcf8fec2f12e","executable":false,"sourceId":"fcf8fec2f12e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fcf8fec2f12e","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/fcf8fec2f12e"}],"repositoryUrl":"https://github.com/hg0434hongzh0/CVE-2026-34197"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1b60044f7f61","executable":false,"sourceId":"1b60044f7f61","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1b60044f7f61","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/1b60044f7f61"}],"repositoryUrl":"https://github.com/asdasddqwdq29-a11y/CVE-2026-34197"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/41f281441151","executable":false,"sourceId":"41f281441151","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"41f281441151","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/41f281441151"}],"repositoryUrl":"https://github.com/dinosn/apache-activemq-rce-research"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/43b08afd1c7b","executable":false,"sourceId":"43b08afd1c7b","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"43b08afd1c7b","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/43b08afd1c7b"}],"repositoryUrl":"https://github.com/K3ysTr0K3R/CVE-2026-34197"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0e866d18cb91","executable":false,"sourceId":"0e866d18cb91","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0e866d18cb91","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/0e866d18cb91"}],"repositoryUrl":"https://github.com/nirvanasec/CVE-2026-34197-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/546cff43bd46","executable":false,"sourceId":"546cff43bd46","verification":"catalogued","source":"vulncheck-kev","modified":"2026-04-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"546cff43bd46","modified":"2026-04-13T00:00:00Z","url":"https://vulncheck.com/xdb/546cff43bd46"}],"repositoryUrl":"https://github.com/hnytgl/CVE-2026-34197"}],"poc_candidates":[{"url":"https://github.com/0xBlackash/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"CVE-2026-34197","modified":"2026-04-08T17:20:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/0xBlackash/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-04-08T17:20:54Z","url":"https://github.com/0xBlackash/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/dinosn/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"CVE-2026-34197 activemq PoC","modified":"2026-07-13T12:12:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/dinosn/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-07-13T12:12:10Z","url":"https://github.com/dinosn/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/DEVSECURITYSPRO/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia Endpoint PoC","modified":"2026-05-06T11:53:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/DEVSECURITYSPRO/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-05-06T11:53:41Z","url":"https://github.com/DEVSECURITYSPRO/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"CVE-2026-34197","modified":"2026-07-09T12:02:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-07-09T12:02:26Z","url":"https://github.com/AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE"}],"tags":[]},{"url":"https://github.com/KONDORDEVSECURITYCORP/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API | PoC Exploit","modified":"2026-04-27T09:49:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/KONDORDEVSECURITYCORP/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-04-27T09:49:16Z","url":"https://github.com/KONDORDEVSECURITYCORP/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/keraattin/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"CVE-2026-34197: Apache ActiveMQ Classic RCE via Jolokia API (CVSS 8.8). Python & Nmap NSE detection scripts. A 13-year-old vulnerability allows remote code execution through the addNetworkConnector MBean operation. Unauthenticated on versions 6.0.0 to 6.1.1. Fixed in 5.19.4 and 6.2.3.","modified":"2026-07-28T11:39:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/keraattin/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-07-28T11:39:39Z","url":"https://github.com/keraattin/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/xshysjhq/CVE-2026-34197-payload-Apache-ActiveMQ-","source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-04-20T02:09:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/xshysjhq/CVE-2026-34197-payload-Apache-ActiveMQ-"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-04-20T02:09:07Z","url":"https://github.com/xshysjhq/CVE-2026-34197-payload-Apache-ActiveMQ-"}],"tags":[]},{"url":"https://github.com/Catherines77/ActiveMQ-EXPtools","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)","modified":"2026-10-15T16:28:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/Catherines77/ActiveMQ-EXPtools"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-10-15T16:28:31Z","url":"https://github.com/Catherines77/ActiveMQ-EXPtools"}],"tags":[]},{"url":"https://github.com/rootdirective-sec/CVE-2026-34197-Lab","source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-05-08T05:55:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/rootdirective-sec/CVE-2026-34197-Lab"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-05-08T05:55:14Z","url":"https://github.com/rootdirective-sec/CVE-2026-34197-Lab"}],"tags":[]},{"url":"https://github.com/LAT-06/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-05-18T06:28:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/LAT-06/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-05-18T06:28:36Z","url":"https://github.com/LAT-06/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/hnytgl/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"这是一个面向防守和内网排查的 Apache ActiveMQ Classic 暴露面检测工具，用于辅助评估 CVE-2026-34197 相关风险。","modified":"2026-06-06T06:43:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/hnytgl/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-06-06T06:43:20Z","url":"https://github.com/hnytgl/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/asdasddqwdq29-a11y/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"Apache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes","modified":"2026-06-06T12:41:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/asdasddqwdq29-a11y/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-06-06T12:41:03Z","url":"https://github.com/asdasddqwdq29-a11y/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/dinosn/apache-activemq-rce-research","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"Apache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison ","modified":"2026-08-26T13:31:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/dinosn/apache-activemq-rce-research"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-08-26T13:31:41Z","url":"https://github.com/dinosn/apache-activemq-rce-research"}],"tags":[]},{"url":"https://github.com/pssec-io/CVE-2026-34197","source":"poc-in-github","sourceId":"CVE-2026-34197","description":"Poc for CVE-2026-34197","modified":"2026-07-08T12:08:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/pssec-io/CVE-2026-34197"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-07-08T12:08:27Z","url":"https://github.com/pssec-io/CVE-2026-34197"}],"tags":[]},{"url":"https://github.com/nirvanasec/CVE-2026-34197-PoC","source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-09-04T15:46:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-34197","url":"https://github.com/nirvanasec/CVE-2026-34197-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-34197","modified":"2026-09-04T15:46:37Z","url":"https://github.com/nirvanasec/CVE-2026-34197-PoC"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-34197 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-34197/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34197.yaml","template":"http/cves/2026/CVE-2026-34197.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-34197%22&type=repositories","executable":false}]}